mountall privilege escalation

udev rule file unsafe permissions...

[USN-985-1] mountall vulnerability

=========================================================== Ubuntu Security Notice USN-985-1 September 08, 2010 mountall vulnerability CVE-2010-2961 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 10.04 LTS This advisory...

USN-985-1: mountall vulnerability

Alasdair MacGregor discovered that mountall created a udev rule file with world-writable permissions. A local attacker could exploit this under certain conditions to cause udev to execute arbitrary commands as the root user...

CVE-2010-2961

mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain privileges by modifying this file...

exploid udev

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space...

Fedora 12 : cups-1.4.2-28.fc12 (2010-3761)

This update addresses a denial of service security issue CVE-2010-0302 as well as fixing several other small problems: classes.conf is now updated when a class member is deleted. the usermode dependency has been removed. the udev rules are now installed in the correct location. cups-config now ha...

Design/Logic Flaw

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKSDMTARGETSPARAMS information to udev even for a crypt UDISKSDMTARGETSTYPE, which allows local users to discover encryption keys by 1 running a certain udevadm command or 2 reading a certain file under /dev/.udev/db/...

CVE-2010-1149

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKSDMTARGETSPARAMS information to udev even for a crypt UDISKSDMTARGETSTYPE, which allows local users to discover encryption keys by 1 running a certain udevadm command or 2 reading a certain file under /dev/.udev/db/...

CVE-2010-1149

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKSDMTARGETSPARAMS information to udev even for a crypt UDISKSDMTARGETSTYPE, which allows local users to discover encryption keys by 1 running a certain udevadm command or 2 reading a certain file under /dev/.udev/db/...

CVE-2010-1149

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKSDMTARGETSPARAMS information to udev even for a crypt UDISKSDMTARGETSTYPE, which allows local users to discover encryption keys by 1 running a certain udevadm command or 2 reading a certain file under /dev/.udev/db/...

CVE-2010-1149

CVE-2010-1149 affects udisks prior to 1.0.1. The issue is in probers/udisks-dm-export.c which exports UDISKS_DM_TARGETS_PARAMS information to udev even for crypt UDISKS_DM_TARGETS_TYPE, allowing local users to discover encryption keys by (1) running a particular udevadm command or (2) reading a f...

CentOS 5 : udev (CESA-2009:0427)

Updated udev packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. udev provides a user-space API and implements a dynamic device directory, providing only the...

Mandriva Security Advisory MDVSA-2009:103-1 (udev)

The remote host is missing an update to udev announced via advisory MDVSA-2009:103-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Security Advisory MDVSA-2009:103-1 (udev)

The remote host is missing an update to udev announced via advisory MDVSA-2009:103-1. OpenVAS Vulnerability Test $Id: mdksa20091031.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:103-1 udev Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

SLES10: Security update for udev

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: udev More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...

SLES10: Security update for udev

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: udev More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...

SLES10: Security update for udev

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: udev More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009 E-So...

SLES10: Security update for udev

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: udev More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009 E-So...

SLES11: Security update for udev

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libvolumeid1 udev More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...

SLES11: Security update for udev

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libvolumeid1 udev More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references...