National Cyber Awareness System

Vulnerability Summary for CVE-2006-7203

Overview

The compat_sys_mount function in fs/compat.c in Linux kernel 2.6.20 and earlier allows local users to cause a denial of service (NULL pointer dereference and oops) by mounting a smbfs file system in compatibility mode ("mount -t smbfs").

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2007-2209

Hyperlink:http://www.vupen.com/english/advisories/2007/2209

External Source: OVAL

Name: oval:org.mitre.oval:def:10941

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10941

External Source: CONFIRM

Name: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff_plain;h=822191a2fa1584a29c3224ab328507adcaeac1ab

Type: Advisory; Exploit

Hyperlink:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff_plain;h=822191a2fa1584a29c3224ab328507adcaeac1ab

External Source: REDHAT

Name: RHSA-2007:0376

Hyperlink:https://rhn.redhat.com/errata/RHSA-2007-0376.html

External Source: UBUNTU

Name: USN-489-1

Hyperlink:http://www.ubuntu.com/usn/usn-489-1

External Source: UBUNTU

Name: USN-486-1

Hyperlink:http://www.ubuntu.com/usn/usn-486-1

External Source: SUSE

Name: SUSE-SA:2007:043

Hyperlink:http://www.novell.com/linux/security/advisories/2007_43_kernel.html

External Source: SUSE

Name: SUSE-SA:2007:035

Hyperlink:http://www.novell.com/linux/security/advisories/2007_35_kernel.html

External Source: MANDRIVA

Name: MDKSA-2007:196

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:196

External Source: MANDRIVA

Name: MDKSA-2007:171

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:171

External Source: DEBIAN

Name: DSA-1504

Hyperlink:http://www.debian.org/security/2008/dsa-1504

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2007-287.htm

External Source: SECUNIA

Name: 29058

Hyperlink:http://secunia.com/advisories/29058

External Source: SECUNIA

Name: 26620

Hyperlink:http://secunia.com/advisories/26620

External Source: SECUNIA

Name: 26289

Hyperlink:http://secunia.com/advisories/26289

External Source: SECUNIA

Name: 26139

Hyperlink:http://secunia.com/advisories/26139

External Source: SECUNIA

Name: 26133

Hyperlink:http://secunia.com/advisories/26133

External Source: SECUNIA

Name: 25961

Hyperlink:http://secunia.com/advisories/25961

External Source: SECUNIA

Name: 25838

Hyperlink:http://secunia.com/advisories/25838

External Source: SECUNIA

Name: 25700

Hyperlink:http://secunia.com/advisories/25700

External Source: SECUNIA

Name: 25683

Hyperlink:http://secunia.com/advisories/25683

External Source: SECUNIA

Name: 25682

Hyperlink:http://secunia.com/advisories/25682

External Source: REDHAT

Name: RHSA-2007:0488

Hyperlink:http://rhn.redhat.com/errata/RHSA-2007-0488.html

References to Check Content

Identifier:oval:org.mitre.oval:def:10941

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10941