Lucene search

K
nvd[email protected]NVD:CVE-2011-1676
HistoryApr 10, 2011 - 2:55 a.m.

CVE-2011-1676

2011-04-1002:55:01
CWE-264
web.nvd.nist.gov
1

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:P/A:N

9.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.2%

mount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed attempt to add a mount entry, which allows local users to trigger corruption of the /etc/mtab file via multiple invocations.

Affected configurations

NVD
Node
linuxutil-linuxRange2.19
OR
linuxutil-linuxMatch2.2
OR
linuxutil-linuxMatch2.5
OR
linuxutil-linuxMatch2.7
OR
linuxutil-linuxMatch2.8
OR
linuxutil-linuxMatch2.9
OR
linuxutil-linuxMatch2.10
OR
linuxutil-linuxMatch2.11
OR
linuxutil-linuxMatch2.12
OR
linuxutil-linuxMatch2.12pre
OR
linuxutil-linuxMatch2.13
OR
linuxutil-linuxMatch2.13pre
OR
linuxutil-linuxMatch2.14
OR
linuxutil-linuxMatch2.15
OR
linuxutil-linuxMatch2.16
OR
linuxutil-linuxMatch2.17
OR
linuxutil-linuxMatch2.18

References

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:P/A:N

9.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.2%