4834 matches found
Debian DSA-825-1 : loop-aes-utils - privilege escalation
David Watson discovered a bug in mount as provided by util-linux and other packages such as loop-aes-utils that allows local users to bypass filesystem access restrictions by re-mounting it read-only. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
Mandrake Linux Security Advisory : util-linux (MDKSA-2005:167)
David Watson disovered that the umount utility, when using the '-r' cpmmand, could remove some restrictive mount options such as 'nosuid'. IF /etc/fstab contained user-mountable removable devices that specified nosuid, a local attacker could exploit this flaw to execute arbitrary programs with ro...
CVE-2005-3109: Undefined Security Weakness
The HFS and HFS+ hfsplus modules in Linux 2.6 allow attackers to cause a denial of service oops by using hfsplus to mount a filesystem that is not hfsplus...
[SECURITY] [DSA 825-1] New loop-aes-utils packages fix privilege escalation
-------------------------------------------------------------------------- Debian Security Advisory DSA 825-1 [email protected] http://www.debian.org/security/ Martin Schulze September 29th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 823-1] New util-linux packages fix privilege escalation
-------------------------------------------------------------------------- Debian Security Advisory DSA 823-1 [email protected] http://www.debian.org/security/ Martin Schulze September 29th, 2005 http://www.debian.org/security/faq -...
DSA-825-1 loop-aes-utils - privilege escalation
Bulletin has no description...
USN-184-1: umount vulnerability
David Watson discovered that "umount -r" removed some restrictive mount options like the "nosuid" flag. If /etc/fstab contains user-mountable removable devices which specify the "nosuid" flag which is common practice for such devices, a local attacker could exploit this to execute arbitrary...
Slackware 9.0 : quotacheck security fix in rc.M (SSA:2003-141-06)
An upgraded sysvinit package is available which fixes a problem with the use of quotacheck in /etc/rc.d/rc.M. The original version of rc.M calls quotacheck like this: echo 'Checking filesystem quotas: /sbin/quotacheck -avugM' /sbin/quotacheck -avugM The 'M' option is wrong. This causes the...
CVE-2004-0483
Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service infinite loop via certain RPC requests...
CVE-2004-0154
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service crash via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name...
CVE-2004-0154: Undefined Security Weakness
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service crash via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name...
DEBIAN-CVE-2004-0186
smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted...
Low: Red Hat Security Advisory: nfs-utils security update
Updated nfs-utils packages that fix a flaw leading to possible rpc.mountd crashes are now available. The nfs-utils package contains the rpc.mountd program, which implements the NFS mount protocol. A flaw was discovered in versions of rpc.mountd in nfs-utils versions after 1.0.3 and prior to 1.0.6...
CVE-2003-0796: Undefined Security Weakness
Unknown vulnerability in rpc.mountd SGI IRIX 6.5.18 through 6.5.22 allows remote attackers to mount from unprivileged ports even with the -n option disabled...
CVE-2003-0976
NFS Server XNFS.NLM for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could allow users to mount file systems when XNFS should deny the host...
CVE-2003-0976: Undefined Security Weakness
NFS Server XNFS.NLM for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could allow users to mount file systems when XNFS should deny the host...
PT-2003-1559 · Ethereal · Ethereal
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.9.11 and earlier Description: The issue is related to multiple integer overflow vulnerabilities. These vulnerabilities can be exploited by remote attackers to cause a denial of service and possibly execute arbitrary code...
CVE-2003-0357: Undefined Security Weakness
Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 Mount and 2 PPP dissectors...
CVE-2003-0335: Undefined Security Weakness
rc.M in Slackware 9.0 calls quotacheck with the -M option, which causes the filesystem to be remounted and possibly reset security-relevant mount flags such as nosuid, nodev, and noexec...