[RHSA-2001:058-04] Updated mount package available

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated mount package available Advisory ID: RHSA-2001:058-04 Issue date: 2001-04-25 Updated on: 2001-05-02 Product: Red Hat Linux Keywords: mount swapon swap permissions Cross...

Important: Red Hat Security Advisory: : Updated mount package available

Updated mount packages fixing a potential security problem are available. If any swap files were created during installation of Red Hat Linux 7.1 they were created during updates if the user requested it, they were world-readable, meaning every user could read data in the swap files, possibly...

mount exploit for glibc locale bug

Exploit for linux platform in category local exploits ================================== mount exploit for glibc locale bug ================================== / mount exploit for glibc locale bug tested on redhat 6.2 and slackware 7.0 and debian 2.2 Debian 2.2 mount-2.10f : ./mnt -n 136 -a...

GLIBC locale - bug mount

GLIBC locale - bug mount / mount exploit for glibc locale bug tested on redhat 6.2 and slackware 7.0 and debian 2.2 Debian 2.2 mount-2.10f : ./mnt -n 136 -a 0x080589a0 -i 192 Redhat 6.2 mount-2.10f : ./mnt -n 114 -a 0x080565dc -i 112 compiled on rh 6.2 mount-2.10m: ./mnt -n 114 -a 0x08059218 -i 1...

GLIBC locale - bug mount

/ mount exploit for glibc locale bug tested on redhat 6.2 and slackware 7.0 and debian 2.2 Debian 2.2 mount-2.10f : ./mnt -n 136 -a 0x080589a0 -i 192 Redhat 6.2 mount-2.10f : ./mnt -n 114 -a 0x080565dc -i 112 compiled on rh 6.2 mount-2.10m: ./mnt -n 114 -a 0x08059218 -i 112 "objdump /bin/mount |...

Mac Volumes & Junctions

I recently encountered a problem where, if you mount a partition to a path rather than a drive letter and then create a Macintosh volume for it, the permissions set for that volume will be ignored by Mac clients. This is what I did and you can too to reproduce the problem: 1. Create a generic use...

CVE-1999-0812

Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations...

PT-2000-1027 · Samba · Samba

Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: A race condition exists in Samba's smbmnt, allowing local users to mount file systems in arbitrary locations. Recommendations: At the moment, there is no information about a newer version tha...

CVE-2000-0218

The CVE-2000-0218 entry concerns a buffer overflow in the Linux mount and umount utilities that allows local users to gain root privileges via a long relative pathname. Affected component: the mount/umount helpers in Linux. Root cause: a buffer overflow vulnerability enabling escalation to root (...

CVE-2000-0218: Undefined Security Weakness

Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname...

CVE-1999-0462: Undefined Security Weakness

suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk...

CVE-2000-0218

Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname...

CVE-1999-0812: Undefined Security Weakness

Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations...

CVE-1999-0422: Undefined Security Weakness

In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set...

CVE-1999-0211: Undefined Security Weakness

Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone...

CVE-1999-0211

Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone...

CVE-1999-0211

CVE-1999-0211 is tied to NFS export handling where extra long export lists (over 256 characters) in mount daemons enable unauthenticated mounting of NFS directories. Public sources (Red Hat security page, CVE lists, Nessus plugin) describe that an attacker could mount exported shares, with Nessus...

cvnmount.exploit

Covin Security Releases: mount bufferoverflow exploit v1.0 Tested operated systems: All current distributions of Linux Affect: Local users on systems affected can gain overflow mounts syntax buffer and execute a shell by overwriting the stack. Affected binaries: /bin/mount and /bin/umount...

netbsd.noexec.txt

Date: Thu, 18 Mar 1999 21:27:39 +1100 From: matthew green To: [email protected] Subject: NetBSD Security Advisory 1999-007 -----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 1999-007 ================================= Topic: noexec mount flag is not properly handled by non-root mount...

[SECURITY] New version of samba released

The version of samba as distributed in Debian GNU/Linux 2.1 has a couple of security problems: a Denial-of-Service attack against nmbd was possible it was possible to exploit smbd if you had a message command defined which used the %f or %M formatter. smbmnts check to see if a user is allowed to...