mountall privilege escalation

udev rule file unsafe permissions...

Ubuntu 10.04 LTS : mountall vulnerability (USN-985-1)

Alasdair MacGregor discovered that mountall created a udev rule file with world-writable permissions. A local attacker could exploit this under certain conditions to cause udev to execute arbitrary commands as the root user. Note that Tenable Network Security has extracted the preceding descripti...

USN-985-1: mountall vulnerability

Alasdair MacGregor discovered that mountall created a udev rule file with world-writable permissions. A local attacker could exploit this under certain conditions to cause udev to execute arbitrary commands as the root user...

CVE-2010-2961

mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain privileges by modifying this file...

CVE-1999-1585

The CVE-1999-1585 entry concerns Sun Solaris 2.x (possibly before 2.4) where the rcS and mountall programs start a privileged shell on the system console if fsck fails during boot. This local vulnerability could let attackers with physical access gain root privileges. The root cause is the boot-t...

CVE-1999-1585

The 1 rcS and 2 mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with physical access to gain root privileges...