Lucene search

K
ubuntuUbuntuUSN-2411-1
HistoryNov 18, 2014 - 12:00 a.m.

mountall vulnerability

2014-11-1800:00:00
ubuntu.com
21

6.5 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

Releases

  • Ubuntu 14.10

Packages

  • mountall - filesystem mounting tool

Details

Saurav Sengupta discovered that mountall incorrectly handled umask when
calling the mount utility, resulting in certain filesystems possibly being
mounted with incorrect permissions.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.10noarchmountall< 2.54ubuntu0.14.10.1UNKNOWN

6.5 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%