PT-2006-4559 · Rocks · Rocks Clusters

Xavier De Leon · Published 2006-07-19 · Updated 2018-10-18 · CVE-2006-3693

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Rocks Clusters versions 4.1 and earlier

Description The issue allows local users to gain privileges via commands enclosed with escaped backticks (``) in an argument to the (1) mount-loop or (2) umount-loop command. This is possible because the input is not properly filtered in a system function call, specifically in the mount-loop.c and umount-loop.c files.

Recommendations For versions 4.1 and earlier, consider restricting the use of the mount-loop and umount-loop commands until a proper fix is applied, and ensure that all system function calls properly filter input to prevent privilege escalation.

Exploit

Fix

Related Identifiers

CVE-2006-3693

Affected Products

Rocks Clusters

References · 12

• 🔥 http://securityfocus.com/bid/19003 · Exploit
• 🔥 https://exploit-db.com/exploits/2015 · Exploit
• 🔥 https://exploit-db.com/exploits/2016 · Exploit
• 🔥 http://xavier.tigerteam.se/exploits/rocksmountdirty.sh · Exploit
• 🔥 http://xavier.tigerteam.se/exploits/rocksumountdirty.py · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3693 · Security Note
• http://secunia.com/advisories/21065 · Vendor Advisory
• http://securityfocus.com/archive/1/440126/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27758 · Note
• http://securityreason.com/securityalert/1242 · Note
• http://vupen.com/english/advisories/2006/2833 · Note
• http://xavier.tigerteam.se/advisories/TSEAD-200606-6.txt · Note