CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

CVE-2013-0157

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

CVE-2013-0157

CVE-2013-0157 affects util-linux-ng (examples cited: 2.14.1, 2.17.2 and likely other versions). The vulnerability enables local users to infer the existence of restricted directories by observing error messages when mounting operations are performed with --guess-fstype or when attempting to mount...

CVE-2013-0157: Exposure of Sensitive Information to an Unauthorized Actor

a mount and b umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by 1 using the --guess-fstype command-line option or 2 attempting to mount a non-existent device, which generates different error messages dependin...

CVE-2013-1813

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors...

Code injection

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors...

CVE-2013-1813

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors...

CVE-2013-1813

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors...

CVE-2013-1813

CVE-2013-1813 affects BusyBox where util-linux/mdev.c creates intermediate /dev/ directories with 0777 permissions when nesting (/dev/dir1/dir2/...), allowing local users to exploit the improper permission handling. The linked Nessus/OpenVAS entries (e.g., MiracleLinux AXSA advisory referencing B...

CVE-2013-1813

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors...

Oracle Linux 6 : util-linux-ng (ELSA-2013-0517)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0517 advisory. - fix 892471 - CVE-2013-0157 mount folder existence information disclosure Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 5 : util-linux (ELSA-2012-0307)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2012-0307 advisory. - fix 768382 - CVE-2011-1675 CVE-2011-1677 util-linux various flaws Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 6 : fuse (ELSA-2011-1083)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1083 advisory. 2.8.3-3 - Bump the release since the bz was set to the wrong target 2.8.3-2 - Fix another umount race bz 673250, CVE-2010-3879 Tenable has extracted th...

Oracle Linux 3 / 4 : util-linux (ELSA-2007-0969)

From Red Hat Security Advisory 2007:0969 : Updated util-linux packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The util-linux package contains a large...

Oracle Linux 4 : util-linux (ELSA-2007-0235)

From Red Hat Security Advisory 2007:0235 : An updated util-linux package that corrects a security issue and fixes several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic...

CentOS 4 : util-linux (CESA-2009:0981)

An updated util-linux package that fixes one security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic system utilities, such as fdisk and mount. A log...

CentOS 4 : util-linux (CESA-2007:0235)

An updated util-linux package that corrects a security issue and fixes several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic system utilities. A flaw was found in the way...

util-linux / mount information leakage

It's possible to check file existance...

[ MDVSA-2013:154 ] util-linux

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:154 http://www.mandriva.com/en/support/security/ Package : util-linux Date : April 29, 2013 Affected: Business Server 1.0, Enterprise Server 5.0 Problem Description: A vulnerability has been found and...

Mandriva Linux Security Advisory : util-linux (MDVSA-2013:154)

A vulnerability has been found and corrected in util-linux : An information disclosure flaw was found in the way the mount command reported errors. A local attacker could use this flaw to determine the existence of files and directories they do not have access to CVE-2013-0157. Additionally for...