Fedora 7 : util-linux-2.13-0.54.1.fc7 (2007-2462)

Mon Oct 8 2007 Karel Zak 2.13-0.54.1 - fix 320131 - CVE-2007-5191 util-linux umount doesn't drop privileges properly when calling helpers F7 - Wed Aug 8 2007 Karel Zak 2.13-0.54 - backport mount relatime patch - Thu Aug 2 2007 Karel Zak 2.13-0.53 - fix 236848 - mount/fstab.c:lockmtab should open...

USN-533-1: util-linux vulnerability

Ludwig Nussel discovered that mount and umount did not properly drop privileges when using helper programs. Local attackers may be able to bypass security restrictions and gain root privileges using programs such as mount.nfs or mount.cifs...

GLSA-200710-18 : util-linux: Local privilege escalation

The remote host is affected by the vulnerability described in GLSA-200710-18 util-linux: Local privilege escalation Ludwig Nussel discovered that the checkspecialmountprog and checkspecialumountprog functions call setuid and setgid in the wrong order and do not check the return values, which can...

util-linux: Local privilege escalation

Background util-linux is a suite of Linux programs including mount and umount, programs used to mount and unmount filesystems. Description Ludwig Nussel discovered that the checkspecialmountprog and checkspecialumountprog functions call setuid and setgid in the wrong order and do not check the...

openSUSE 10 Security Update : util-linux (util-linux-4552)

Insufficient length checks when reading the passphrase for encrypted paritions in the mount program could cause a buffer overflow that could potentially be exploited to gain root privileges. When executing helper program 'mount' didn't check the return value of setuid. Therefore helper program...

Mandrake Linux Security Advisory : util-linux (MDKSA-2007:198)

The mount and umount programs in util-linux called the setuid and setgid functions in the wrong order and did not check the return values, which could allow attackers to grain privileges via helper applications such as mount.nfs. Updated packages have been patched to fix this issue. %NASLMINLEVEL...

Fedora Core 6 : util-linux-2.13-0.49.fc6 (2007-722)

Mon Oct 8 2007 Karel Zak 2.13-0.49 - fix 320141 - CVE-2007-5191 util-linux umount doesn't drop privileges properly when calling helpers FC6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

[SECURITY] Fedora Core 6 Update: util-linux-2.13-0.49.fc6

The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, Util-linux contains the fdisk configuration tool and the login program...

[SECURITY] Fedora 7 Update: util-linux-2.13-0.54.1.fc7

The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, Util-linux contains the fdisk configuration tool and the login program...

rPSA-2007-0212-1 util-linux

rPath Security Advisory: 2007-0212-1 Published: 2007-10-08 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Local Root Deterministic Privilege Escalation Updated Versions: util-linux=/conary.rpath.com@rpl:devel//1/2.12r-1.5-1 rPath Issue Tracking System:...

DTSA-64-1 util-linux - privilege escalation in mount / umount

Bulletin has no description...

CVE-2007-5191

mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs...

CVE-2007-5191

The CVE-2007-5191 issue concerns util-linux: the mount and umount utilities call setuid/setgid in the wrong order and do not check return values, which could allow a local attacker to elevate privileges via helper programs (e.g., mount.nfs). Affected component: util-linux (mount/umount). Impact: ...

Util-linux安全绕过漏洞

util-linux包含大量底层系统工具。 util-linux不正确验证用户权限，远程攻击者可以利用漏洞绕过安全限制，进行未授权访问。 问题存在于登录进程处理登录时不需要验证，部分参考自身验证的进程允许远程攻击者绕过访问策略，进行未授权访问。 util-linux util-linux 2.12 a + MandrakeSoft Linux Mandrake 10.2 x8664 + MandrakeSoft Linux Mandrake 10.2 x8664 + MandrakeSoft Linux Mandrake 10.2 + MandrakeSoft Linux Mandrak...

Mandrake Linux Security Advisory : util-linux (MDKSA-2007:111)

login in util-linux-2.12a and later versions skips pamacctmgmt and chauthtok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pamacctmgmt and chauthtok. Updated packag...

Low: util-linux security and bug fix update

2.12a-16.EL4.25 - fix 235920 - fix alignment warnings at runtime on ia64 2.12a-16.EL4.24 - fix 235920 - mount needs to recognize vfat labels 2.12a-16.EL4.23 - fix 188099 - can't mount iscsi ext3 fs by label. - fix 197768 - man mount' does not list option 'mand' - fix 190808 - 4TB FS ends up with...

util security update

CentOS Errata and Security Advisory CESA-2007:0235 An updated util-linux package that corrects a security issue and fixes several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of...

RHEL 4 : util-linux (RHSA-2007:0235)

An updated util-linux package that corrects a security issue and fixes several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic system utilities. A flaw was found in the way...

security flaw

login in util-linux-2.12a skips pamacctmgmt and chauthtok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pamacctmgmt and chauthtok...

Low: Red Hat Security Advisory: util-linux security and bug fix update

An updated util-linux package that corrects a security issue and fixes several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic system utilities. A flaw was found in the way...