VulnerabilityModified
CVE-2006-5871
smbfs in Linux kernel 2.6.8 and other versions, and 2.4.x before 2.4.34, when UNIX extensions are enabled, ignores certain mount options, which could cause clients to use server-specified uid, gid and mode settings.
MEDIUM 4.1EPSS 0.32%
Does this matter?
Lower severity and a low EPSS score (0.32%). Track it; it rarely justifies an emergency change on its own.
Description
smbfs in Linux kernel 2.6.8 and other versions, and 2.4.x before 2.4.34, when UNIX extensions are enabled, ignores certain mount options, which could cause clients to use server-specified uid, gid and mode settings.
- CVSS 2.0
- 4.1 MEDIUMAV:L/AC:M/Au:S/C:P/I:P/A:P
- EPSS
- 0.32% probability · 25th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/23361
- http://secunia.com/advisories/23370
- http://secunia.com/advisories/23395
- http://secunia.com/advisories/25683
- http://www.debian.org/security/2006/dsa-1233
- http://www.novell.com/linux/security/advisories/2007_35_kernel.html
- http://www.securityfocus.com/bid/21523
- http://www.us.debian.org/security/2006/dsa-1237
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10171
- http://secunia.com/advisories/23361
- http://secunia.com/advisories/23370
- http://secunia.com/advisories/23395
- http://secunia.com/advisories/25683
- http://www.debian.org/security/2006/dsa-1233
- http://www.novell.com/linux/security/advisories/2007_35_kernel.html
- http://www.securityfocus.com/bid/21523
- http://www.us.debian.org/security/2006/dsa-1237
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10171
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.