Code injection

The makelockdirname function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/...

CVE-2010-2192

The makelockdirname function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/...

CVE-2010-2192

CVE-2010-2192 concerns the pmount package up to version 0.9.18, where the make_lockdir_name function in policy.c allows a local attacker to overwrite arbitrary files via a symlink attack on a file in /var/lock/. The Debian advisory (DSA-2063-1) and Gentoo GLSA 201412-08 confirm this vulnerability...

CVE-2010-2192

The makelockdirname function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/...

CVE-2010-2192

The makelockdirname function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/...

CVE-2010-2192: Improper Link Resolution Before File Access

The makelockdirname function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/...