Lucene search

K
osvGoogleOSV:DSA-1450-1
HistoryJan 05, 2008 - 12:00 a.m.

util-linux privilege escalation

2008-01-0500:00:00
Google
osv.dev
6

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

It was discovered that util-linux, miscellaneous system utilities,
didn’t drop privileged user and group permissions in the correct order
in the mount and umount commands. This could potentially allow a local
user to gain additional privileges.

For the old stable distribution (sarge), this problem has been fixed in
version 2.12p-4sarge2.

For the stable distribution (etch), this problem has been fixed in version
2.12r-19etch1.

We recommend that you upgrade your util-linux package.

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C