Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-2192
HistoryJun 18, 2010 - 12:00 a.m.

CVE-2010-2192

2010-06-1800:00:00
ubuntu.com
ubuntu.com
6

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.1%

The make_lockdir_name function in policy.c in pmount 0.9.18 allow local
users to overwrite arbitrary files via a symlink attack on a file in
/var/lock/.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchpmount< 0.9.16-4ubuntu0.1UNKNOWN
ubuntu9.04noarchpmount< 0.9.18-2+lenny1build0.9.04.1UNKNOWN
ubuntu9.10noarchpmount< 0.9.19-1ubuntu0.1UNKNOWN
ubuntu10.04noarchpmount< 0.9.20-2ubuntu0.1UNKNOWN

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.1%