CVE-2011-3585

Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when the /etc/mtab~ file exists.

• CWE-362

• https://bugzilla.redhat.com/show_bug.cgi?id=742907Issue Tracking, Third Party Advisory
• https://bugzilla.samba.org/show_bug.cgi?id=7179Issue Tracking, Vendor Advisory
• https://git.samba.org/?p=cifs-utils.git%3Ba=commitdiff%3Bh=810f7e4e0f2dbcbee0294d9b371071cb08268200
• https://www.openwall.com/lists/oss-security/2011/09/27/1Mailing List, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2011/09/30/5Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=742907Issue Tracking, Third Party Advisory
• https://bugzilla.samba.org/show_bug.cgi?id=7179Issue Tracking, Vendor Advisory
• https://git.samba.org/?p=cifs-utils.git%3Ba=commitdiff%3Bh=810f7e4e0f2dbcbee0294d9b371071cb08268200
• https://www.openwall.com/lists/oss-security/2011/09/27/1Mailing List, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2011/09/30/5Mailing List, Third Party Advisory

Published

Dec 31, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3579server/webmail.php in IceWarp WebMail in IceWarp Mail Server…
• CVE-2011-3580IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows …
• CVE-2011-3581Heap-based buffer overflow in the ldns_rr_new_frm_str_intern…
• CVE-2011-3582A Cross-site Request Forgery (CSRF) vulnerability exists in …8.8
• CVE-2011-3583It was found that Typo3 Core versions 4.5.0 - 4.5.5 uses pre…9.8
• CVE-2011-3584The TYPO3 Core wec_discussion extension before 2.1.1 is vuln…9.8
• CVE-2011-3586Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2011-3587Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used…
• CVE-2011-3588The SSH configuration in the Red Hat mkdumprd script for kex…
• CVE-2011-3589The Red Hat mkdumprd script for kexec-tools, as distributed …
• CVE-2011-3590The Red Hat mkdumprd script for kexec-tools, as distributed …
• CVE-2011-3591Multiple cross-site scripting (XSS) vulnerabilities in phpMy…