6 matches found
LinuxCIFS utils: Multiple Vulnerabilities
Background The LinuxCIFS utils are a collection of tools for managing Linux CIFS Client Filesystems. Description Multiple vulnerabilities have been discovered in LinuxCIFS utils. Please review the CVE identifiers referenced below for details. Impact A stack-based buffer overflow when parsing the...
GLSA-202311-05 : LinuxCIFS utils: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202311-05 LinuxCIFS utils: Multiple Vulnerabilities - In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges...
GLSA-202009-16 : LinuxCIFS: Shell injection
The remote host is affected by the vulnerability described in GLSA-202009-16 LinuxCIFS: Shell injection The mount.cifs utility had a shell injection issue where one can embed shell commands via the username mount option. Those commands will be run via popen in the context of the user calling moun...
LinuxCIFS: Shell injection
Background The LinuxCIFS utils are a collection of tools for managing Linux CIFS Client Filesystems. Description The mount.cifs utility had a shell injection issue where one can embed shell commands via the username mount option. Those commands will be run via popen in the context of the user...
GLSA-201612-08 : LinuxCIFS utils: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-201612-08 LinuxCIFS utils: Buffer overflow A stack-based buffer overflow was discovered in cifskey.c or cifscreds.c in LinuxCIFS, as used in pamcifscreds. Impact : A remote attacker could exploit this vulnerability to cause an...
LinuxCIFS utils: Buffer overflow
Background The LinuxCIFS utils are a collection of tools for managing Linux CIFS Client Filesystems. Description A stack-based buffer overflow was discovered in cifskey.c or cifscreds.c in LinuxCIFS, as used in “pamcifscreds.” Impact A remote attacker could exploit this vulnerability to cause an...