CVE-2011-1089

CVE-2011-1089 refers to a vulnerability in the GNU C Library (glibc/libc6) up to version 2.13 where addmntent does not report an error when writes to /etc/mtab fail. The issue enables local users to trigger corruption of /etc/mtab, demonstrated by a process with a small RLIMIT_FSIZE. This is a se...

CVE-2011-1678

CVE-2011-1678 involves Samba’s smbfs in 3.5.8 and earlier, where mount.cifs and umount.cifs can append to /etc/mtab (or /etc/mtab.tmp) without checking resource limits. A process with a small RLIMIT_FSIZE can trigger corruption of /etc/mtab, a related issue to CVE-2011-1089. The vulnerability is ...

CVE-2011-1675

Mode C: CVE-2011-1675 affects util-linux's mount utility (versions 2.19 and earlier). The issue arises when mount appends to /etc/mtab.tmp without first checking RLIMIT_FSIZE, allowing a local user to trigger corruption of /etc/mtab. It is linked to CVE-2011-1089 and discussed in MiracleLinux AXS...

PT-2011-3288

Name of the Vulnerable Software and Affected Versions VMware Open Virtual Machine Tools versions 8.4.2-261024 and earlier Description The issue allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT FSIZE value. This occurs because vmware-hgfsmounter...

PT-2011-3287

Name of the Vulnerable Software and Affected Versions ncpfs versions 2.2.6 and earlier Description The issue in ncpmount affects local systems, potentially allowing for local attack vectors due to the failure to remove the /etc/mtab lock file after a failed attempt to add a mount entry. The exact...

PT-2011-1207

Name of the Vulnerable Software and Affected Versions util-linux versions prior to 2.22.2 Description The issue concerns multiple vulnerabilities in the util-linux package that can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can...

CVE-2011-1676: Undefined Security Weakness

mount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed attempt to add a mount entry, which allows local users to trigger corruption of the /etc/mtab file via multiple invocations...

CVE-2011-1089: Undefined Security Weakness

The addmntent function in the GNU C Library aka glibc or libc6 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small...

CVE-2011-1675: Undefined Security Weakness

mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMITFSIZE value, a related issue to CVE-2011-1089...

PT-2011-3286

Name of the Vulnerable Software and Affected Versions ncpfs versions 2.2.6 and earlier Description The issue allows local users to trigger corruption of the /etc/mtab file by exploiting a flaw in how ncpfs handles resource limits. Specifically, ncpfs attempts to use ncpmount to append to the...

CVE-2011-1089

The addmntent function in the GNU C Library aka glibc or libc6 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small...

glibc: Improper encoding of names with certain special character in utilities for writing to mtab table

The encodename macro in misc/mntentr.c in the GNU C Library aka glibc or libc6 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service mtab corruption, or possibly modify mount...

Cross site scripting

/etc/init.d/boot.localfs in the aaabase package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab...

CVE-2011-0461

CVE-2011-0461 affects the openSUSE/SUSE package aaa_base. The flaw is in /etc/init.d/boot.localfs and allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab. Affected products/versions are aaa_base in SUSE/OpenSUSE 11.2 prior to 11.2-43.48.1 and in OpenSUSE 11.3 pri...

PT-2011-2363

Name of the Vulnerable Software and Affected Versions aaa base versions prior to 11.2-43.48.1 in SUSE openSUSE 11.2 aaa base versions prior to 11.3-8.7.1 in openSUSE 11.3 Description The issue allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab. This is due to a...

SuSE 11.1 Security Update : FUSE (SAT Patch Number 4095)

The following security issues were fixed : - FUSE allowed local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem. CVE-2010-3879 - Avoid mounting a directory including...

CVE-2010-3879

FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem, a different vulnerability than CVE-2010-0789...

Code injection

FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem, a different vulnerability than CVE-2010-0789...

CVE-2010-3879

CVE-2010-3879 affects FUSE (likely versions up to 2.8.5 and earlier). The vulnerability arises from a symlink attack on the parent directory of a FUSE mountpoint, enabling local users to create/modify mtab entries and thereby unmount a filesystem (a separate issue from CVE-2010-0789). The descrip...

CVE-2010-3879

FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem, a different vulnerability than CVE-2010-0789...