CVE-2006-5871

Linux kernel <2.6.8 or <2.4.34 - Privilege Escalation

Title source: llm

Description

smbfs in Linux kernel 2.6.8 and other versions, and 2.4.x before 2.4.34, when UNIX extensions are enabled, ignores certain mount options, which could cause clients to use server-specified uid, gid and mode settings.

References (9)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/21523

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10171

[Vendor Advisory] http://www.novell.com/linux/security/advisories/2007_35_kernel.html

[Third Party Advisory] http://www.debian.org/security/2006/dsa-1233

[Third Party Advisory] http://www.us.debian.org/security/2006/dsa-1237

[Third Party Advisory] http://secunia.com/advisories/23361

[Third Party Advisory] http://secunia.com/advisories/23370

[Third Party Advisory] http://secunia.com/advisories/23395

[Third Party Advisory] http://secunia.com/advisories/25683

Scores

EPSS 0.0007

EPSS Percentile 21.2%

Classification

Status draft

Affected Products (2)

linux/linux_kernel

Timeline

Published Dec 11, 2006

Tracked Since Feb 18, 2026