CVE-2011-2724
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2011-2724
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Samba 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Samba是用于 Linux 和 Unix 的标准 Windows 互操作性程序套件。 Samba 3.5.10和之前版本存在输入验证错误漏洞，该漏洞源于不能准确检验设备名称和由有效字符组成的mountpoint字符串。本地用户可借助特制的字符串导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2011-2724
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2011-2724
请登录查看更多情报信息。
- http://comments.gmane.org/gmane.linux.kernel.cifs/3827x_refsource_CONFIRM
- https://bugzilla.redhat.com/show_bug.cgi?id=726691x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2011-2724
Same Patch Batch · n/a · 2011-09-06 · 18 CVEs total
| CVE-2010-4831 | GTK+ gdk/win32/gdkinput-win32.c不可信搜索路径漏洞 | |
| CVE-2011-3390 | IBM OpenAdmin Tool index.php多个跨站脚本攻击漏洞 | |
| CVE-2011-3205 | Squid 安全漏洞 | |
| CVE-2011-2723 | Linux Kernel GRO 'skb_gro_header_slow()'拒绝服务漏洞 | |
| CVE-2011-2700 | Linux Kernel drivers/media/radio/si4713-i2c.c si4713_write_econtrol_string函数多个缓冲区错误漏洞 | |
| CVE-2011-2654 | Novell Cloud Manager RPC会话初始化任意代码执行漏洞 | |
| CVE-2011-1359 | IBM WebSphere Application Server管理控制台目录遍历漏洞 | |
| CVE-2011-0258 | Apple QuickTime 'mp4v'解码器信息处理任意代码执行漏洞 | |
| CVE-2010-4833 | GTK+ modules/engines/ms-windows/xp_theme.c不可信搜索路径漏洞 | |
| CVE-2011-3388 | Opera不安全站点信息漏洞 | |
| CVE-2011-3204 | Hammerhead hammerhead.cc后置链接漏洞 | |
| CVE-2011-3200 | RSyslog 'parseLegacySyslogMsg()'函数缓冲区错误漏洞 | |
| CVE-2011-2660 | SUSE Linux Enterprise Desktop vpnc包modify_resolvconf_suse脚本输入验证漏洞 | |
| CVE-2011-2184 | Linux Kernel security/keys/process_keys.c key_replace_session_keyring函数拒绝服务漏洞 | |
| CVE-2011-1776 | Linux kernel 缓冲区错误漏洞 | |
| CVE-2011-1771 | Linux Kernel fs/cifs/file.c cifs_close函数拒绝服务漏洞 | |
| CVE-2011-3389 | Opera 输入验证错误漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2011-2724
No comments yet