CVE-2010-0547: Input Validation
Published Jan 26, 2010
·Updated
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
Affected Software
126 affected componentsFixes available
redhat/samba<0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
redhat/samba3x<0:3.5.4-0.70.el5
0:3.5.4-0.70.el5
redhat/samba<0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
Samba Samba=3.0.14a
Samba Samba=2.2.1a
Samba Samba=3.0.27
Samba Samba=3.0.31
Samba Samba=3.0.3
Samba Samba=2.2.12
Samba Samba=3.0.8
Samba Samba=3.2.15
Samba Samba=3.3.3
Samba Samba=3.0.29
Samba Samba=3.0.25-pre2
Samba Samba=3.0.25b
Samba Samba=3.2.5
Samba Samba=3.4.2
Samba Samba=2.2.3a
Samba Samba=3.2.3
Samba Samba=1.9.18-p2
Samba Samba=3.0.2a
Samba Samba=3.0.36
Samba Samba=3.4.0
Samba Samba=3.2.4
Samba Samba=3.0.5
Samba Samba=1.9.17-p5
Samba Samba=1.9.18-p1
Samba Samba=3.3.9
Samba Samba=2.2.8a
Samba Samba=3.0.28
Samba Samba=3.0.32
Samba Samba=3.0.26a
Samba Samba=3.2.13
Samba Samba=3.0.6
Samba Samba=1.9.18-p4
Samba Samba=3.0.21a
Samba Samba=3.0.34
Samba Samba=3.0.25-rc1
Samba Samba=1.9.17-p1
Samba Samba=1.9.18-p10
Samba Samba=3.0.23
Samba Samba=3.2.1
Samba Samba=3.0.4-rc1
Samba Samba=3.3.4
Samba Samba=3.0.33
Samba Samba=1.9.17
Samba Samba=3.0.20a
Samba Samba=2.2.9
Samba Samba=2.2.3
Samba Samba=3.0.21b
Samba Samba=3.0.27a
Samba Samba=3.3.7
Samba Samba=3.4.1
Samba Samba=3.0.0
Samba Samba=2.2.11
Samba Samba=1.9.18-p3
Samba Samba=3.0.9
Samba Samba=3.2.9
Samba Samba=3.0.11
Samba Samba=2.2.1
Samba Samba=3.0.13
Samba Samba=3.3.1
Samba Samba=3.2.2
Samba Samba=1.9.18-p8
Samba Samba=3.2.7
Samba Samba=3.0.20b
Samba Samba=2.2.7a
Samba Samba=1.9.17-p2
Samba Samba=3.2.10
Samba Samba=2.2.4
Samba Samba=3.0.21
Samba Samba=3.0.26
Samba Samba=3.0.14
Samba Samba=1.9.18-p6
Samba Samba=3.0.25-pre1
Samba Samba=1.9.18-p7
Samba Samba=3.0.30
Samba Samba=3.0.21c
Samba Samba=3.3.0
Samba Samba=2.2a
Samba Samba=3.0.23b
Samba Samba=3.3.6
Samba Samba=3.0.25-rc3
Samba Samba=2.2.6
Samba Samba=2.2.8
Samba Samba=3.0.2
Samba Samba=3.0.12
Samba Samba=3.2.12
Samba Samba=3.0.37
Samba Samba=1.9.18
Samba Samba=3.0.20
Samba Samba=2.2.0a
Samba Samba=3.2.8
Samba Samba=3.0.35
Samba Samba<=3.4.5
Samba Samba=3.0.25a
Samba Samba=3.0.25c
Samba Samba=1.9.17-p3
Samba Samba=3.3.2
Samba Samba=3.0.24
Samba Samba=3.0.10
Samba Samba=3.2.11
Samba Samba=3.4.4
Samba Samba=2.2.2
Samba Samba=2.2.10
Samba Samba=3.4.3
Samba Samba=3.3.8
Samba Samba=3.2.14
Samba Samba=3.0.23d
Samba Samba=3.0.25-rc2
Samba Samba=2.2.0
Samba Samba=3.2.0
Samba Samba=2.2.5
Samba Samba=3.3.5
Samba Samba=3.0.23c
Samba Samba=3.2.6
Samba Samba=1.9.18-p5
Samba Samba=1.9.17-p4
Samba Samba=2.2.7
Samba Samba=3.0.23a
Samba Samba=3.0.28a
Samba Samba=3.0.4
Samba Samba=3.3.10
Samba Samba=3.0.25
Samba Samba=3.0.1
Samba Samba=3.0.22
Event History
Jan 26, 2010
CVE Published
via Red Hat·12:00 AM
Feb 4, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Feb 5, 2010
Data Sourced
via Red Hat·01:14 PM
DescriptionSeverityAffected Software
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
1
What is the severity of CVE-2010-0547?
CVE-2010-0547 has a moderate severity rating as it can lead to denial of service through mtab corruption.
2
How do I fix CVE-2010-0547?
To fix CVE-2010-0547, upgrade Samba to version 3.4.6 or later.
3
What are the affected versions for CVE-2010-0547?
CVE-2010-0547 affects Samba versions 3.4.5 and earlier.
4
Can CVE-2010-0547 be exploited remotely?
CVE-2010-0547 is primarily a local vulnerability, affecting local users who can create crafted strings.
5
What impact does CVE-2010-0547 have on system stability?
CVE-2010-0547 may cause instability due to potential mtab file corruption resulting in a denial of service.