CVE-2010-0547

Publication date 4 February 2010

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.

Status

Package Ubuntu Release Status
samba 9.10 karmic
Fixed 2:3.4.0-3ubuntu5.4
9.04 jaunty
Fixed 2:3.3.2-1ubuntu3.3
8.10 intrepid
Fixed 2:3.2.3-1ubuntu3.7
8.04 LTS hardy
Fixed 3.0.28a-1ubuntu4.10
6.06 LTS dapper
Fixed 3.0.22-1ubuntu3.10

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
samba