Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-3970

Опубликовано: 11 сент. 2008
Источник: nvd
CVSS2: 6.9
EPSS Низкий

Описание

pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restrictions via a local mount.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:pam_mount:pam_mount:0.10:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.11:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.12.2:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.13:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.15:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.16:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.17:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.18:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.19:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.20:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.21:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.26:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.27:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.28:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.29:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.31:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.32:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.35:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.35.1:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.37:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.38:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.39:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.40:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.41:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.43:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.44:*:*:*:*:*:*:*
cpe:2.3:a:pam_mount:pam_mount:0.45:*:*:*:*:*:*:*

EPSS

Процентиль: 12%
0.00041
Низкий

6.9 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu
больше 17 лет назад

pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restrictions via a local mount.

debian
больше 17 лет назад

pam_mount 0.10 through 0.45, when luserconf is enabled, does not verif ...

github
почти 4 года назад

pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restrictions via a local mount.

EPSS

Процентиль: 12%
0.00041
Низкий

6.9 Medium

CVSS2

Дефекты

CWE-264