CVE-2011-2724

The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.

• CWE-20

• http://comments.gmane.org/gmane.linux.kernel.cifs/3827Patch
• http://git.samba.org/?p=cifs-utils.git%3Ba=commit%3Bh=1e7a32924b22d1f786b6f490ce8590656f578f91
• http://openwall.com/lists/oss-security/2011/07/29/9Patch
• http://secunia.com/advisories/45798Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:148
• http://www.redhat.com/support/errata/RHSA-2011-1220.htmlVendor Advisory
• http://www.redhat.com/support/errata/RHSA-2011-1221.htmlVendor Advisory
• http://www.securitytracker.com/id?1025984
• https://bugzilla.redhat.com/show_bug.cgi?id=726691Patch
• http://comments.gmane.org/gmane.linux.kernel.cifs/3827Patch
• http://git.samba.org/?p=cifs-utils.git%3Ba=commit%3Bh=1e7a32924b22d1f786b6f490ce8590656f578f91
• http://openwall.com/lists/oss-security/2011/07/29/9Patch
• http://secunia.com/advisories/45798Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:148
• http://www.redhat.com/support/errata/RHSA-2011-1220.htmlVendor Advisory
• http://www.redhat.com/support/errata/RHSA-2011-1221.htmlVendor Advisory
• http://www.securitytracker.com/id?1025984
• https://bugzilla.redhat.com/show_bug.cgi?id=726691Patch

Published

Sep 6, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-2718Multiple directory traversal vulnerabilities in the relation…
• CVE-2011-2719libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x …
• CVE-2011-2720The autocompletion functionality in GLPI before 0.80.2 does …
• CVE-2011-2721Off-by-one error in the cli_hm_scan function in matcher-hash…
• CVE-2011-2722The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp…
• CVE-2011-2723The skb_gro_header_slow function in include/linux/netdevice.…
• CVE-2011-2725Directory traversal vulnerability in Ark 4.7.x and earlier a…
• CVE-2011-2726An access bypass issue was found in Drupal 7.x before versio…7.5
• CVE-2011-2727The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.p…
• CVE-2011-2728The bsd_glob function in the File::Glob module for Perl befo…
• CVE-2011-2729native/unix/native/jsvc-unix.c in jsvc in the Daemon compone…
• CVE-2011-2730VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5…