Every CVE Search/ Get API key

CVE-2011-1678

smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file...

3.3 LowFix available

smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

Exploit likelihood

0.53%Down 1.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.3

smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

Record
CVE-2011-1678
CVSS 2.0
3.3 LowAV:L/AC:M/Au:N/C:P/I:P/A:N
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

Record
CVE-2011-1678
Updated
2026-11-02
EUVDEUVD-2011-1678 No score

smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

Record
EUVD-2011-1678
Updated
2026-11-03
GitHub AdvisoriesGHSA-v7g7-rpcw-4f58 No score

smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file...

smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

Record
GHSA-v7g7-rpcw-4f58
Weakness
CWE-20
Updated
2026-11-02
OSV No score

smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

Record
CVE-2011-1678
Updated
2026-11-02
OSVDEBIAN-CVE-2011-1678 No score

smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

Record
DEBIAN-CVE-2011-1678
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cifs-utils
Debian:12
before 2:5.1-1
2:5.1-1
cifs-utils
Debian:13
before 2:5.1-1
2:5.1-1
cifs-utils
Debian:14
before 2:5.1-1
2:5.1-1
samba
Debian:12
before 2:3.4.7~dfsg-2
2:3.4.7~dfsg-2
samba
Debian:13
before 2:3.4.7~dfsg-2
2:3.4.7~dfsg-2
samba
Debian:14
before 2:3.4.7~dfsg-2
2:3.4.7~dfsg-2
samba
Red Hat:enterprise_linux:4::as
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-client
Red Hat:enterprise_linux:4::as
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-common
Red Hat:enterprise_linux:4::as
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-debuginfo
Red Hat:enterprise_linux:4::as
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
Show 67 moreShow less
Affected packages
PackageAffectedFixed
samba-swat
Red Hat:enterprise_linux:4::as
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba
Red Hat:enterprise_linux:4::desktop
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-client
Red Hat:enterprise_linux:4::desktop
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-common
Red Hat:enterprise_linux:4::desktop
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-swat
Red Hat:enterprise_linux:4::desktop
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba
Red Hat:enterprise_linux:4::es
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-client
Red Hat:enterprise_linux:4::es
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-common
Red Hat:enterprise_linux:4::es
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-debuginfo
Red Hat:enterprise_linux:4::es
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-swat
Red Hat:enterprise_linux:4::es
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba
Red Hat:enterprise_linux:4::ws
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-client
Red Hat:enterprise_linux:4::ws
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-common
Red Hat:enterprise_linux:4::ws
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
samba-swat
Red Hat:enterprise_linux:4::ws
before 0:3.0.33-0.34.el4
0:3.0.33-0.34.el4
libsmbclient
Red Hat:enterprise_linux:5::client
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba
Red Hat:enterprise_linux:5::client
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-client
Red Hat:enterprise_linux:5::client
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-common
Red Hat:enterprise_linux:5::client
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-debuginfo
Red Hat:enterprise_linux:5::client
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-swat
Red Hat:enterprise_linux:5::client
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
libsmbclient-devel
Red Hat:enterprise_linux:5::client_workstation
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba
Red Hat:enterprise_linux:5::client_workstation
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-debuginfo
Red Hat:enterprise_linux:5::client_workstation
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
libsmbclient
Red Hat:enterprise_linux:5::server
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
libsmbclient-devel
Red Hat:enterprise_linux:5::server
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba
Red Hat:enterprise_linux:5::server
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-client
Red Hat:enterprise_linux:5::server
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-common
Red Hat:enterprise_linux:5::server
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-debuginfo
Red Hat:enterprise_linux:5::server
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba-swat
Red Hat:enterprise_linux:5::server
before 0:3.0.33-3.29.el5_7.4
0:3.0.33-3.29.el5_7.4
samba3x
Red Hat:enterprise_linux:5::client
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-client
Red Hat:enterprise_linux:5::client
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-common
Red Hat:enterprise_linux:5::client
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-debuginfo
Red Hat:enterprise_linux:5::client
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-doc
Red Hat:enterprise_linux:5::client
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-domainjoin-gui
Red Hat:enterprise_linux:5::client
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-swat
Red Hat:enterprise_linux:5::client
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind
Red Hat:enterprise_linux:5::client
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x
Red Hat:enterprise_linux:5::client_workstation
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-debuginfo
Red Hat:enterprise_linux:5::client_workstation
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind-devel
Red Hat:enterprise_linux:5::client_workstation
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x
Red Hat:enterprise_linux:5::server
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-client
Red Hat:enterprise_linux:5::server
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-common
Red Hat:enterprise_linux:5::server
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-debuginfo
Red Hat:enterprise_linux:5::server
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-doc
Red Hat:enterprise_linux:5::server
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-domainjoin-gui
Red Hat:enterprise_linux:5::server
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-swat
Red Hat:enterprise_linux:5::server
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind
Red Hat:enterprise_linux:5::server
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
samba3x-winbind-devel
Red Hat:enterprise_linux:5::server
before 0:3.5.4-0.83.el5_7.2
0:3.5.4-0.83.el5_7.2
cifs-utils
Red Hat:enterprise_linux:6::server
before 0:4.8.1-2.el6_1.2
0:4.8.1-2.el6_1.2
cifs-utils-debuginfo
Red Hat:enterprise_linux:6::server
before 0:4.8.1-2.el6_1.2
0:4.8.1-2.el6_1.2
libsmbclient
Red Hat:enterprise_linux:6::server
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba
Red Hat:enterprise_linux:6::server
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-client
Red Hat:enterprise_linux:6::server
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-common
Red Hat:enterprise_linux:6::server
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-debuginfo
Red Hat:enterprise_linux:6::server
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind
Red Hat:enterprise_linux:6::server
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind-clients
Red Hat:enterprise_linux:6::server
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
libsmbclient-devel
Red Hat:enterprise_linux:6::server
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-doc
Red Hat:enterprise_linux:6::server
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-domainjoin-gui
Red Hat:enterprise_linux:6::server
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-swat
Red Hat:enterprise_linux:6::server
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind-devel
Red Hat:enterprise_linux:6::server
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4
samba-winbind-krb5-locator
Red Hat:enterprise_linux:6::server
before 0:3.5.6-86.el6_1.4
0:3.5.6-86.el6_1.4

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-1678 is a low vulnerability (CVSS 3.3) in Samba, published April 10, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.53%, the 44th percentile. Fixed in cifs-utils 2:5.1-1.

References

Show 51 moreShow less
MoveEnter Open