CVE-2011-1678 Denial of service in n/a

Low 3.3 Published 10 Apr 2011 Updated 6 Aug 2024

Local attackers can corrupt the /etc/mtab file by exploiting missing resource limit checks in Samba's mount and umount utilities.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2011-1678?

CVE-2011-1678 is a low-severity denial of service vulnerability in Samba Samba, published on 10 Apr 2011. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

Weakness: CWE-20

Which versions are affected by CVE-2011-1678?

It affects 1 product.

Products include Samba Samba.

How do I fix CVE-2011-1678?

Apply the vendor's patch.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2011-1678 being exploited?

There is no known exploitation of CVE-2011-1678 in the wild and no public exploit code.

All Samba Samba vulnerabilities

Sources

Also known as DEBIAN-CVE-2011-1678, ECHO-df75-4cfc-459b, GHSA-v7g7-rpcw-4f58.