EUVD-1999-1061

Malware in sbrugna...

DEBIAN-CVE-2014-5207

fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNTNODEV, MNTNOSUID, and MNTNOEXEC and changing MNTATIMEMASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, ...

security flaw

umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r remount option, which causes the file system to be remounted with just the read-only flag, which effectively clears the...

USN-184-1: umount vulnerability

David Watson discovered that "umount -r" removed some restrictive mount options like the "nosuid" flag. If /etc/fstab contains user-mountable removable devices which specify the "nosuid" flag which is common practice for such devices, a local attacker could exploit this to execute arbitrary...

DEBIAN-CVE-2005-2876

umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r remount option, which causes the file system to be remounted with just the read-only flag, which effectively clears the...

CVE-1999-1080

In SunOS 5.7, rmmount may mount file systems without the nosuid flag, allowing local users with physical access to gain root privileges by mounting media containing a setuid program and running volcheck when nosuid is not specified in rmmount.conf. This vulnerability stems from mounting behavior ...

solaris.5.7.mount.suid.txt

Date: Mon, 10 May 1999 09:14:12 +0200 From: Jonas Stahre To: [email protected] Subject: SunOS 5.7 rmmount, no nosuid. The man-page for rmmount under SunOS 5.7 says: File systems mounted by rmmount are always mounted with the nosuid flag set, thereby disabling set-uid programs and access to blo...

CVE-1999-1080

rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM that contains a setuid program and running...