Skip to content
OpenAdvisories
Unscored RHSA-2011:1221 5 CVEs

Red Hat Security Advisory: samba and cifs-utils security and bug fix update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 15

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::server cifs-utils 0:4.8.1-2.el6_1.2
Red Hat · RHEL 6 enterprise_linux:6::server cifs-utils-debuginfo 0:4.8.1-2.el6_1.2
Red Hat · RHEL 6 enterprise_linux:6::server libsmbclient 0:3.5.6-86.el6_1.4
Red Hat · RHEL 6 enterprise_linux:6::server libsmbclient-devel 0:3.5.6-86.el6_1.4
Red Hat · RHEL 6 enterprise_linux:6::server samba 0:3.5.6-86.el6_1.4
Red Hat · RHEL 6 enterprise_linux:6::server samba-client 0:3.5.6-86.el6_1.4
Red Hat · RHEL 6 enterprise_linux:6::server samba-common 0:3.5.6-86.el6_1.4
Red Hat · RHEL 6 enterprise_linux:6::server samba-debuginfo 0:3.5.6-86.el6_1.4
Red Hat · RHEL 6 enterprise_linux:6::server samba-doc 0:3.5.6-86.el6_1.4
Red Hat · RHEL 6 enterprise_linux:6::server samba-domainjoin-gui 0:3.5.6-86.el6_1.4
Red Hat · RHEL 6 enterprise_linux:6::server samba-swat 0:3.5.6-86.el6_1.4
Red Hat · RHEL 6 enterprise_linux:6::server samba-winbind 0:3.5.6-86.el6_1.4
Red Hat · RHEL 6 enterprise_linux:6::server samba-winbind-clients 0:3.5.6-86.el6_1.4
Red Hat · RHEL 6 enterprise_linux:6::server samba-winbind-devel 0:3.5.6-86.el6_1.4
Red Hat · RHEL 6 enterprise_linux:6::server samba-winbind-krb5-locator 0:3.5.6-86.el6_1.4

Vulnerabilities 5

  • Unscored —
    CVE-2011-1678

    smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to …

    samba cifs-utils Debian
  • Unscored —
    CVE-2011-2522 Public exploit EPSS 11%

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x bef…

    samba Debian
  • Unscored —
    CVE-2011-2694

    Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool …

    samba Debian
  • Unscored —
    CVE-2011-2724

    The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly ver…

    samba cifs-utils Debian
  • Unscored —
    CVE-2011-3585

    Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a d…

    Samba Samba samba cifs-utils Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=695925
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=721348
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=722537
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=726691
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=728517
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1221.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-1678
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1678
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1678
  • report
    https://access.redhat.com/security/cve/CVE-2011-2522
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2522
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2522
  • report
    https://access.redhat.com/security/cve/CVE-2011-2694
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2694
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2694
  • report
    https://access.redhat.com/security/cve/CVE-2011-2724
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2724
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2724
  • report
    https://access.redhat.com/security/cve/CVE-2011-3585
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=742907
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3585
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3585