USN-1280-1: Linux (OMAP4) vulnerabilities
It was discovered that CIFS incorrectly handled authentication. When a user had a CIFS share mounted that required authentication, a local user could mount the same share without knowing the correct password. (CVE-2011-1585) Robert Swiecki discovered that mapping extensions were incorrectly handled. A local attacker could exploit this to crash the system, leading to a denial of service. (CVE-2011-2496)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-1280-1?
The severity of USN-1280-1 is considered to be high due to improper authentication handling in CIFS.
How do I fix USN-1280-1?
To fix USN-1280-1, users should upgrade to the updated package version that addresses the CIFS authentication vulnerability.
Which systems are affected by USN-1280-1?
USN-1280-1 affects Ubuntu 10.10 systems running the linux-image-2.6.35-903-omap4 package version up to 2.6.35-903.27.
What is CVE-2011-1585 in relation to USN-1280-1?
CVE-2011-1585 is the identifier for the vulnerability exploited in USN-1280-1, which involves incorrect handling of CIFS authentication.
Can a local user exploit the USN-1280-1 vulnerability?
Yes, a local user could potentially exploit the USN-1280-1 vulnerability to mount a CIFS share without knowing the correct password.