Util-linux mount/umount Privilege Bug Lets Local Users Gain Elevated Privileges
|
|
SecurityTracker Alert ID: 1018782
|
|
SecurityTracker URL: http://securitytracker.com/id?1018782
|
|
CVE Reference: CVE-2007-5191
(Links to External Site)
|
Date: Oct 9 2007
|
Impact: Root access via local system, User access via local system
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Description: A vulnerability was reported in Util-linux. A local user can obtain elevated privileges on the target system.
The mount and umount functions do not properly drop permissions after calling set user id (setuid) and set group id (setgid) helper
functions, such as 'mount.nfs'.
A local user can exploit this to execute arbitrary commands on the target system with elevated
privileges.
|
Impact: A local user can obtain elevated privileges on the target system.
|
Solution: A source code fix is available.
The vendor's advisory is available at:
http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git;a=commit;h=ebbeb2c7ac1b00b6083905957837a271e80b187e
|
Cause: Access control error, State error
|
Underlying OS: Linux (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Tue, 9 Oct 2007 08:25:00 -0400
Subject: util-linux
|
CVE-2007-5191
http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git;a=commit;h=ebbeb2c7ac1b00b608390595783
7a271e80b187e
|
|
