debian/libpam-mount vulnerabilities

Latest debian/libpam-mount CVEs

Newest publication first

1. CVE-2008-5138 passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd.##### temporary file.

   Published 2008-11-18

   Medium·CVSS 6.9 EPSS 0.29%

   passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd.##### temporary file.

2. DTSA-169-1 libpam-mount - access restriction bypass

   Published 2008-10-03

   Unknown

3. CVE-2008-3970 pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restri...

   Published 2008-09-10

   Medium·CVSS 6.9 EPSS 0.32%

   pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restrictions via a local mount.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.