CVE-2010-2192 The make_lockdir_name function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/.
LowCVSS 1.9
EPSS 0.28%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The make_lockdir_name function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vincent fourmond pmount | = 0.9.18 | No fix listed |
| debian/pmount(Debian:12) | < 0.9.23-1 | 0.9.23-1 |
| debian/pmount(Debian:13) | < 0.9.23-1 | 0.9.23-1 |
| debian/pmount(Debian:14) | < 0.9.23-1 | 0.9.23-1 |
References
- security.debian.org
- DSA-2063 patch vendor-advisory
- 40939 vdb-entry
- ADV-2010-1520 vdb-entry
- Debian Security Tracker CVE-2010-2192 vendor-advisory