Lucene search
+L

274 matches found

OSV
OSV
•added 2019/04/22 4:29 p.m.•7 views

DEBIAN-CVE-2011-3145

When mount.ecrpytfsprivate before version 87-0ubuntu1.2 calls setreuid it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfsprivate...

9.8CVSS9.4AI score0.0098EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/04/22 3:35 p.m.•53 views

CVE-2011-3145 mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group

When mount.ecrpytfsprivate before version 87-0ubuntu1.2 calls setreuid it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfsprivate...

3.8CVSS9.4AI score0.0098EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2017/03/07 12:00 a.m.•42 views

openSUSE Security Update : util-linux (openSUSE-2017-306)

This update for util-linux fixes the following issues : This security issue was fixed : - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges bsc1023041. This non-security issues were fixed : - lscpu: Implement WSL...

5.5CVSS6AI score0.00279EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2017/03/07 12:00 a.m.•44 views

openSUSE Security Update : util-linux (openSUSE-2017-305)

This update for util-linux fixes the following issues : This security issue was fixed : - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges bsc1023041. This non-security issues were fixed : - lscpu: Implement WSL...

5.5CVSS6AI score0.00279EPSS
SaveExploits0References7
OpenVAS
OpenVAS
•added 2015/10/06 12:00 a.m.•55 views

Oracle: Security Advisory (ELSA-2011-1241)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8AI score0.0098EPSS
SaveExploits2References2
OSV
OSV
•added 2015/05/21 12:00 a.m.•12 views

UBUNTU-CVE-2015-3202

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking 1 mount or 2 umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNTMTAB environment variable that is used by mount's debugging feature...

3.6CVSS6.8AI score0.01004EPSS
SaveExploits5References5
Tenable Nessus
Tenable Nessus
•added 2014/06/13 12:00 a.m.•35 views

openSUSE Security Update : ncpfs (openSUSE-SU-2011:0985-1)

Following issues are fixed by this update: The ncpfs mount and umount programs were affected by the /etc/mtab truncation problems on RLIMITFSIZE. CVE-2011-1679 Also on errors, the mtab lock was not removed, blocking other applications from modifying /etc/mtab. CVE-2011-1680 %NASLMINLEVEL 70300 C...

4.4CVSS8.2AI score0.00474EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2014/06/13 12:00 a.m.•43 views

openSUSE Security Update : ncpfs (openSUSE-SU-2011:0985-1)

Following issues are fixed by this update: The ncpfs mount and umount programs were affected by the /etc/mtab truncation problems on RLIMITFSIZE. CVE-2011-1679 Also on errors, the mtab lock was not removed, blocking other applications from modifying /etc/mtab. CVE-2011-1680 %NASLMINLEVEL 70300 C...

4.4CVSS8.2AI score0.00474EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2014/06/13 12:00 a.m.•30 views

openSUSE Security Update : ecryptfs-utils (openSUSE-SU-2012:0106-1)

mount.ecrpytfsprivate did not set correct group ownerships when it modifies mtab CVE-2011-3145. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ecryptfs-utils-5541. The text description of thi...

9.8CVSS6.8AI score0.0098EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2014/06/13 12:00 a.m.•37 views

openSUSE Security Update : ecryptfs-utils (openSUSE-SU-2011:0902-1)

This update of ecryptfs-utils fixes several security problems : - CVE-2011-1831 - Race condition when checking mountpoint during mount. - CVE-2011-1832 - Race condition when checking mountpoint during unmount. - CVE-2011-1833 - Race condition when checking source during mount. - CVE-2011-1834 -...

4.6CVSS8.2AI score0.00382EPSS
SaveExploits2References8
Tenable Nessus
Tenable Nessus
•added 2014/06/13 12:00 a.m.•39 views

openSUSE Security Update : ecryptfs-utils (openSUSE-SU-2011:0902-1)

This update of ecryptfs-utils fixes several security problems : - CVE-2011-1831 - Race condition when checking mountpoint during mount. - CVE-2011-1832 - Race condition when checking mountpoint during unmount. - CVE-2011-1833 - Race condition when checking source during mount. - CVE-2011-1834 -...

4.6CVSS8.2AI score0.00382EPSS
SaveExploits2References8
OSV
OSV
•added 2014/02/26 3:55 p.m.•7 views

DEBIAN-CVE-2011-1749

The nfsaddmntent function in support/nfs/nfsmntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMITFSIZE value,...

3.3CVSS6.6AI score0.00348EPSS
SaveExploits0References1
Prion
Prion
•added 2014/02/26 3:55 p.m.•37 views

Sql injection

The nfsaddmntent function in support/nfs/nfsmntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMITFSIZE value,...

3.3CVSS6.2AI score0.00417EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2014/02/26 3:55 p.m.•11 views

UBUNTU-CVE-2011-1749

The nfsaddmntent function in support/nfs/nfsmntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMITFSIZE value,...

3.3CVSS5.8AI score0.00348EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2014/02/26 3:55 p.m.•33 views

CVE-2011-1749

The nfsaddmntent function in support/nfs/nfsmntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMITFSIZE value,...

3.3CVSS5.9AI score0.00348EPSS
SaveExploits0References1
NVD
NVD
•added 2014/02/15 2:57 p.m.•22 views

CVE-2011-1834

utils/mount.ecryptfsprivate.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows local users to cause a denial of service table corruption or bypass intended unmounting restrictions via a umount system call...

2.1CVSS8.6AI score0.00382EPSS
SaveExploits0References4
OSV
OSV
•added 2014/02/15 2:57 p.m.•14 views

DEBIAN-CVE-2011-1834

utils/mount.ecryptfsprivate.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows local users to cause a denial of service table corruption or bypass intended unmounting restrictions via a umount system call...

2.1CVSS6.5AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
•added 2014/02/15 11:00 a.m.•87 views

CVE-2011-1834

CVE-2011-1834 affects the ecryptfs-utils package, specifically the mount helper behavior in mount.ecryptfs_private.c. The root cause is improper handling of the mtab file during error conditions, which can allow a local user to cause a denial of service via table corruption or bypass intended unm...

2.1CVSS8.3AI score0.00382EPSS
SaveExploits0References4Affected Software2
Debian CVE
Debian CVE
•added 2014/02/15 11:00 a.m.•26 views

CVE-2011-1834

utils/mount.ecryptfsprivate.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows local users to cause a denial of service table corruption or bypass intended unmounting restrictions via a umount system call...

2.1CVSS8.7AI score0.00382EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/02/15 12:00 a.m.•5 views

CVE-2011-1834: Undefined Security Weakness

utils/mount.ecryptfsprivate.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows local users to cause a denial of service table corruption or bypass intended unmounting restrictions via a umount system call...

2.1CVSS5.8AI score0.00382EPSS
SaveExploits0References2
Rows per page
Query Builder