Bug 275901 (CVE-2007-3843) - CVE-2007-3843 CIFS signing sec= mount options don't work correctly
Summary: CVE-2007-3843 CIFS signing sec= mount options don't work correctly
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2007-3843
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Lubomir Rintel
QA Contact: Martin Jenner
URL:
Whiteboard:
Depends On: 246595 253315 293141 293151
Blocks:
TreeView+ depends on / blocked
 
Reported: 2007-09-04 09:31 UTC by Marcel Holtmann
Modified: 2021-11-12 19:42 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2007-11-01 13:34:31 UTC
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2007:0939 0 normal SHIPPED_LIVE Important: kernel security update 2008-01-07 18:58:13 UTC

Description Marcel Holtmann 2007-09-04 09:31:26 UTC
email from Steve French:

CIFS code was changing the wrong global variable for signing (the old
one, used only by dead, soon to be removed, code in
fs/cifs/connect.c).  Eventually I need to test ntlm, ntlmv2 etc.
override on command line (with or without the "i" integrity checking
option ie ntlmi ... ntlm with signing etc.)


Note You need to log in before you can comment on or make changes to this bug.