PT-2014-4179 · Canonical · Mountall

Publicado 2014-11-25 · Atualizado 2016-12-08 · CVE-2014-1421

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions mountall version 1.54

Description The issue allows local users to bypass intended access restrictions due to improper handling of the umask when using the mount utility.

Recommendations For mountall version 1.54, update to a version that properly handles the umask to prevent access restriction bypass.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-1421

Produtos afetados

Mountall

Referências · 2

• http://ubuntu.com/usn/USN-2411-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-1421 · Nota de Segurança