CVE-2010-0547

samba: mount.cifs improper device name and mountpoint strings sanitization

Published Feb 4, 2010 CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Description
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2004-1 New samba packages fix several vulnerabilities
EUVD EUVD EUVD-2010-0578 client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 12:52 AM
Reserved
Feb 4, 2010, 12:00 AM
Status
Modified
Published
Feb 4, 2010, 8:15 PM
Modified
Jun 16, 2026, 11:16 PM
Severity
Low
Public date
Jan 26, 2010, 12:00 AM