PT-2004-3500 · Mntd · Mntd

Published 2004-12-31 · Updated 2017-07-20 · CVE-2004-2610

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions mntd versions prior to 0.4.2

Description The issue in mntd might allow local users to gain privileges via shell metacharacters in a remount option in the configuration file. However, typical usage would restrict write access to the configuration file, which may limit the potential impact.

Recommendations For versions prior to 0.4.2, update to version 0.4.2 or later to resolve the issue. As a temporary workaround, consider restricting write access to the configuration file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2004-2610

Affected Products

Mntd

References · 5

• 🔥 http://securitytracker.com/id?1011088 · Exploit
• http://osvdb.org/9380 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-2610 · Security Note
• http://prdownloads.sourceforge.net/mntd/mntd-0.4.2.tar.gz?download · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17149 · Note