CVE-2008-3970 pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restri...
MediumCVSS 6.9
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restrictions via a local mount.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pam mount | = 0.10 | No fix listed |
| pam mount | = 0.11 | No fix listed |
| pam mount | = 0.12.2 | No fix listed |
| pam mount | = 0.13 | No fix listed |
| pam mount | = 0.15 | No fix listed |
| pam mount | = 0.16 | No fix listed |
| pam mount | = 0.17 | No fix listed |
| pam mount | = 0.18 | No fix listed |
| pam mount | = 0.19 | No fix listed |
| pam mount | = 0.20 | No fix listed |
| pam mount | = 0.21 | No fix listed |
| pam mount | = 0.26 | No fix listed |
| pam mount | = 0.27 | No fix listed |
| pam mount | = 0.28 | No fix listed |
| pam mount | = 0.29 | No fix listed |
| pam mount | = 0.31 | No fix listed |
| pam mount | = 0.32 | No fix listed |
| pam mount | = 0.35 | No fix listed |
| pam mount | = 0.35.1 | No fix listed |
| pam mount | = 0.37 | No fix listed |
| pam mount | = 0.38 | No fix listed |
| pam mount | = 0.39 | No fix listed |
| pam mount | = 0.40 | No fix listed |
| pam mount | = 0.41 | No fix listed |
| pam mount | = 0.43 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pam mount | = 0.44 | No fix listed |
| pam mount | = 0.45 | No fix listed |
| debian/libpam-mount(Debian:12) | < 0.48-1 | 0.48-1 |
| debian/libpam-mount(Debian:13) | < 0.48-1 | 0.48-1 |
| debian/libpam-mount(Debian:14) | < 0.48-1 | 0.48-1 |
References
- dev.medozas.de
- SUSE-SR:2008:019 vendor-advisory
- [pam-mount-user] 20080905 pam_mount 0.47 released mailing-list
- sourceforge.net
- MDVSA-2008:208 vendor-advisory
- [oss-security] 20080906 CVE request: pam_mount < 0.47 missing security checks mailing-list
- [oss-security] 20080909 Re: CVE request: pam_mount < 0.47 missing security checks mailing-list
- 31041 vdb-entry
- pammount-luserconf-privilege-escalation(44960) vdb-entry
- Debian Security Tracker CVE-2008-3970 vendor-advisory
- bugs.debian.org issue-tracking