CVE-2011-1678: Samba

Low severity, CVSS 3.3. EPSS: 0.5% chance of exploitation in the next 30 days.

smbfs in Samba 3.5.8 and earlier attempts to use (1) mount.cifs to append to the /etc/mtab file and (2) umount.cifs to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

Affected products

• Samba Samba: up to and including 3.5.8

Published 2011-04-10. Last modified 2026-06-16.