Lucene search

K
osvGoogleOSV:DSA-1449-1
HistoryJan 05, 2008 - 12:00 a.m.

loop-aes-utils privilege escalation

2008-01-0500:00:00
Google
osv.dev
8

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

It was discovered that loop-aes-utils, tools for mounting and manipulating
filesystems, didn’t drop privileged user and group permissions in the correct order
in the mount and umount commands. This could potentially allow a local
user to gain additional privileges.

For the old stable distribution (sarge), this problem has been fixed in
version 2.12p-4sarge2.

For the stable distribution (etch), this problem has been fixed in version
2.12r-15+etch1.

We recommend that you upgrade your loop-aes-utils package.

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C