CVE-2011-3585

MediumCVSS 4.7/10Last modified Jun 16, 2026

Description

Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when the /etc/mtab~ file exists.

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-362

Affected software

Vendor	Product	Versions
Samba	Samba	3.6

References

https://bugzilla.redhat.com/show_bug.cgi?id=742907Issue Tracking, Third Party Advisory
https://bugzilla.samba.org/show_bug.cgi?id=7179Issue Tracking, Vendor Advisory
https://git.samba.org/?p=cifs-utils.git%3Ba=commitdiff%3Bh=810f7e4e0f2dbcbee0294d9b371071cb08268200
https://www.openwall.com/lists/oss-security/2011/09/27/1Mailing List, Third Party Advisory
https://www.openwall.com/lists/oss-security/2011/09/30/5Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=742907Issue Tracking, Third Party Advisory
https://bugzilla.samba.org/show_bug.cgi?id=7179Issue Tracking, Vendor Advisory
https://git.samba.org/?p=cifs-utils.git%3Ba=commitdiff%3Bh=810f7e4e0f2dbcbee0294d9b371071cb08268200
https://www.openwall.com/lists/oss-security/2011/09/27/1Mailing List, Third Party Advisory
https://www.openwall.com/lists/oss-security/2011/09/30/5Mailing List, Third Party Advisory

Timeline

Published: Dec 31, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-35879.3Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attacke CVE-2011-35885.7The SSH configuration in the Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x befo CVE-2011-35895.7The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in CVE-2011-35905.7The Red Hat mkdumprd script for kexec-tools, as distributed in the kexec-tools 1.x before 1.102pre-154 and 2.x before 2.0.0-209 packages in CVE-2011-35913.5Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary we CVE-2011-35923.5Multiple cross-site scripting (XSS) vulnerabilities in the PMA_unInlineEditRow function in js/sql.js in phpMyAdmin 3.4.x before 3.4.5 allow CVE-2011-35935.7A certain Red Hat patch to the vlan_hwaccel_do_receive function in net/8021q/vlan_core.c in the Linux kernel 2.6.32 on Red Hat Enterprise Li CVE-2011-35944.3The g_markup_escape_text function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and possibly other product CVE-2011-35955.4Multiple Cross-site Scripting (XSS) vulnerabilities exist in Joomla! through 1.7.0 in index.php in the search word, extension, asset, and au CVE-2011-35967.5Polipo before 1.0.4.1 suffers from a DoD vulnerability via specially-crafted HTTP POST / PUT request.CVE-2011-35977.5Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via CVE-2011-35984.3Multiple cross-site scripting (XSS) vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML