christianha
2010-Nov-15 16:17 UTC
[Secure-testing-team] Bug#603631: smbfs: smbmount renders system when logged on with unprivileged user. Even reboot is not possible
Package: smbfs Version: 2:3.2.5-4lenny13 Severity: critical Tags: security Justification: breaks unrelated software 1. sudo apt-get install smbfs 2. sudo /usr/sbin/adduser nagios 3. sudo /usr/sbin/usermod -a -G nagios nagios 4. while true; do mkdir -p /tmp/mnt_10.0.0.2/test$ && smbmount //10.0.0.2/test$ /tmp/mnt_10.0.0.2/test$ -o password=asdfasdf,uid=nagios,gid=nagios,ro >> /dev/null& done 5. wait approximately 10 seconds 6. Strg+C 7. ps aux (You will see lots of processes called /sbin/mount.cifs.) 8. you can.t reboot system Solution is to install linux-image-amd64 (>=2.6.32+25) from deb http://www.backports.org/debian lenny-backports main contrib non-free -- System Information: Debian Release: 5.0.6 APT prefers stable APT policy: (500, ''stable'') Architecture: amd64 (x86_64) Kernel: Linux 2.6.26-2-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages smbfs depends on: ii libc6 2.7-18lenny6 GNU C Library: Shared libraries ii libcomerr2 1.41.3-1 common error description library ii libkeyutils1 1.2-9 Linux Key Management Utilities (li ii libkrb53 1.6.dfsg.4~beta1-5lenny4 MIT Kerberos runtime libraries ii libldap-2.4-2 2.4.11-1+lenny2 OpenLDAP libraries ii libpopt0 1.14-4 lib for parsing cmdline parameters ii libtalloc1 1.2.0~git20080616-1 hierarchical pool based memory all ii libwbclient0 2:3.2.5-4lenny13 client library for interfacing wit ii netbase 4.34 Basic TCP/IP networking system ii samba-common 2:3.2.5-4lenny13 Samba common files used by both th smbfs recommends no packages. Versions of packages smbfs suggests: pn smbclient <none> (no description available) -- no debconf information