CVE-2011-1089

Опубликовано: 10 апр. 2011

Источник: nvd

CVSS2: 3.3

EPSS Низкий

Описание

The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small RLIMIT_FSIZE value, a different vulnerability than CVE-2010-0296.

Ссылки

http://openwall.com/lists/oss-security/2011/03/04/10
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/04/11
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/04/12
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/04/9
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/05/3
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/05/7
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/07/9
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/14/16
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/14/5
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/14/7
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/15/6
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/22/4
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/22/6
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/31/3
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/31/4
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/04/01/2
Mailing List
Third Party Advisory
http://sourceware.org/bugzilla/show_bug.cgi?id=12625
Issue Tracking
http://www.mandriva.com/security/advisories?name=MDVSA-2011:178
Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2011:179
Broken Link
http://www.redhat.com/support/errata/RHSA-2011-1526.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*

Версия до 2.13 (включая)

cpe:2.3:a:gnu:glibc:1.00:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:1.01:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:1.02:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:1.03:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:1.04:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:1.05:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:1.06:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:1.07:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:1.08:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:1.09:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:1.09.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.0:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.1.1.6:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.1.2:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.1.3:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.1.3.10:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.1.9:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.2:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.2.2:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.2.3:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.2.4:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.2.5:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.3:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.3.2:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.3.3:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.3.4:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.3.5:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.3.6:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.3.10:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.4:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.5:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.6:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.7:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.8:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.9:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.10:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.10.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.10.2:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.11:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.11.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.11.2:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.11.3:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.12.0:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.12.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:glibc:2.12.2:*:*:*:*:*:*:*

EPSS

Процентиль: 26%

0.00087

Низкий

3.3 Low

CVSS2

Дефекты

CWE-16

Связанные уязвимости

CVE-2011-1089

ubuntu

больше 14 лет назад

CVE-2011-1089

redhat

больше 14 лет назад

CVE-2011-1089

debian

больше 14 лет назад

The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 ...

GHSA-h832-96qp-642g

github

больше 3 лет назад

ELSA-2011-1526

oracle-oval

почти 14 лет назад

ELSA-2011-1526: glibc security, bug fix, and enhancement update (LOW)

EPSS

Процентиль: 26%

0.00087

Низкий

3.3 Low

CVSS2

Дефекты

CWE-16