CVE-2011-1676 mount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed attempt to add a mount entry, which allows local users to trigger corruption of the /etc/mtab file via multip...
LowCVSS 3.3
EPSS 0.49%
- Published
- Updated
- Exploit status
- No public exploit known
Description
mount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed attempt to add a mount entry, which allows local users to trigger corruption of the /etc/mtab file via multiple invocations.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux util-linux | <= 2.19 | No fix listed |
| linux util-linux | = 2.2 | No fix listed |
| linux util-linux | = 2.5 | No fix listed |
| linux util-linux | = 2.7 | No fix listed |
| linux util-linux | = 2.8 | No fix listed |
| linux util-linux | = 2.9 | No fix listed |
| linux util-linux | = 2.10 | No fix listed |
| linux util-linux | = 2.11 | No fix listed |
| linux util-linux | = 2.12 | No fix listed |
| linux util-linux | = 2.12-pre | No fix listed |
| linux util-linux | = 2.13 | No fix listed |
| linux util-linux | = 2.13-pre | No fix listed |
| linux util-linux | = 2.14 | No fix listed |
| linux util-linux | = 2.15 | No fix listed |
| linux util-linux | = 2.16 | No fix listed |
| linux util-linux | = 2.17 | No fix listed |
| linux util-linux | = 2.18 | No fix listed |
References
- [oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110303 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110303 Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110307 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110315 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE exploit mailing-list
- [oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- [oss-security] 20110401 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE mailing-list
- bugzilla.redhat.com exploit
- utillinux-mount-sec-bypass(66704) vdb-entry