DescriptionThe Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request.
Overall state of this security issue: Resolved
This issue is currently rated as having moderate severity.
|National Vulnerability Database|
SUSE Security Advisories:
- SUSE-SA:2007:064, published Tue, 04 Dec 2007 11:00:00 +0000
- SUSE-SA:2008:006, published Thu, 07 Feb 2008 11:00:00 +0000
SUSE Timeline for this CVECVE page created: Tue Jul 9 15:43:12 2013
CVE page last modified: Fri Oct 7 12:45:37 2022