[Secure-testing-team] Bug#603631: smbfs: smbmount renders system when logged on with unprivileged user. Even reboot is not possible

[christianha]

Package: smbfs
Version: 2:3.2.5-4lenny13
Severity: critical
Tags: security
Justification: breaks unrelated software

1.	sudo apt-get install smbfs
2.	sudo /usr/sbin/adduser nagios
3.	sudo /usr/sbin/usermod -a -G nagios nagios
4.	while true; do mkdir -p /tmp/mnt_10.0.0.2/test$ && smbmount //10.0.0.2/test$ /tmp/mnt_10.0.0.2/test$ -o password=asdfasdf,uid=nagios,gid=nagios,ro >> /dev/null& done
5.	wait approximately 10 seconds
6.	Strg+C
7.	ps aux (You will see lots of processes called /sbin/mount.cifs.)
8.	you can.t reboot system

Solution is to install linux-image-amd64 (>=2.6.32+25) from deb http://www.backports.org/debian lenny-backports main contrib non-free


-- System Information:
Debian Release: 5.0.6
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-2-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages smbfs depends on:
ii  libc6           2.7-18lenny6             GNU C Library: Shared libraries
ii  libcomerr2      1.41.3-1                 common error description library
ii  libkeyutils1    1.2-9                    Linux Key Management Utilities (li
ii  libkrb53        1.6.dfsg.4~beta1-5lenny4 MIT Kerberos runtime libraries
ii  libldap-2.4-2   2.4.11-1+lenny2          OpenLDAP libraries
ii  libpopt0        1.14-4                   lib for parsing cmdline parameters
ii  libtalloc1      1.2.0~git20080616-1      hierarchical pool based memory all
ii  libwbclient0    2:3.2.5-4lenny13         client library for interfacing wit
ii  netbase         4.34                     Basic TCP/IP networking system
ii  samba-common    2:3.2.5-4lenny13         Samba common files used by both th

smbfs recommends no packages.

Versions of packages smbfs suggests:
pn  smbclient                     <none>     (no description available)

-- no debconf information