CVE-2010-0547

2010-02-0400:00:00

ubuntu.com

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

24.0%

JSON

client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does
not verify that the (1) device name and (2) mountpoint strings are composed
of valid characters, which allows local users to cause a denial of service
(mtab corruption) via a crafted string.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchsamba< 3.0.22-1ubuntu3.10UNKNOWN
ubuntu8.04noarchsamba< 3.0.28a-1ubuntu4.10UNKNOWN
ubuntu8.10noarchsamba< 2:3.2.3-1ubuntu3.7UNKNOWN
ubuntu9.04noarchsamba< 2:3.3.2-1ubuntu3.3UNKNOWN
ubuntu9.10noarchsamba< 2:3.4.0-3ubuntu5.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	samba	< 3.0.22-1ubuntu3.10	UNKNOWN
ubuntu	8.04	noarch	samba	< 3.0.28a-1ubuntu4.10	UNKNOWN
ubuntu	8.10	noarch	samba	< 2:3.2.3-1ubuntu3.7	UNKNOWN
ubuntu	9.04	noarch	samba	< 2:3.3.2-1ubuntu3.3	UNKNOWN
ubuntu	9.10	noarch	samba	< 2:3.4.0-3ubuntu5.4	UNKNOWN