Every CVE Search/ Get API key

CVE-2011-2724

The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier...

1.2 LowFix available

The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.

Exploit likelihood

0.43%Down 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 1.2

The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.

Record
CVE-2011-2724
CVSS 2.0
1.2 LowAV:L/AC:H/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.

Record
CVE-2011-2724
Updated
2026-11-02
EUVDEUVD-2011-2702 No score

The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.

Record
EUVD-2011-2702
Updated
2026-11-03
GitHub AdvisoriesGHSA-rv4g-gfv5-499c No score

The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier...

The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.

Record
GHSA-rv4g-gfv5-499c
Weakness
CWE-20
Updated
2026-11-02
OSV No score

The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.

Record
CVE-2011-2724
Updated
2026-11-02
OSVDEBIAN-CVE-2011-2724 No score

The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.

Record
DEBIAN-CVE-2011-2724
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cifs-utils
Debian:12
 before 2:5.1-1
2:5.1-1
cifs-utils
Debian:13
 before 2:5.1-1
2:5.1-1
cifs-utils
Debian:14
 before 2:5.1-1
2:5.1-1
samba
Debian:12
 before 2:3.4.7~dfsg-2
2:3.4.7~dfsg-2
samba
Debian:13
 before 2:3.4.7~dfsg-2
2:3.4.7~dfsg-2
samba
Debian:14
 before 2:3.4.7~dfsg-2
2:3.4.7~dfsg-2
samba3x
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-client
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-common
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
Show 31 moreShow less
Affected packages
PackageAffectedFixed
samba3x-doc
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-domainjoin-gui
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-swat
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind
Red Hat:enterprise_linux:5::client
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-client
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-common
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-doc
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-domainjoin-gui
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-swat
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind-devel
Red Hat:enterprise_linux:5::server
 before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
cifs-utils
Red Hat:enterprise_linux:6::server
 before 0:4.8.1-2.el6_1.2
0:4.8.1-2.el6_1.2
cifs-utils-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:4.8.1-2.el6_1.2
0:4.8.1-2.el6_1.2
libsmbclient
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-client
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-common
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind-clients
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
libsmbclient-devel
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-doc
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-domainjoin-gui
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-swat
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind-devel
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind-krb5-locator
Red Hat:enterprise_linux:6::server
 before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-2724 is a low vulnerability (CVSS 1.2) in Samba, published September 6, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in cifs-utils 2:5.1-1.

References

Show 31 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open