[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2010-0296

Date: (C)2010-06-01   (M)2017-08-18
 
CVSS Score: 7.2Access Vector: LOCAL
Exploitability Subscore: 3.9Access Complexity: LOW
Impact Subscore: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE











The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.

Reference:
SECTRACK-1024043
http://www.securityfocus.com/archive/1/archive/1/520102/100/0/threaded
SECUNIA-39900
SECUNIA-43830
SECUNIA-46397
ADV-2010-1246
ADV-2011-0863
DSA-2058
GLSA-201011-01
IAVM:2011-A-0147
MDVSA-2010:111
MDVSA-2010:112
RHSA-2011:0412
SUSE-SA:2010:052
USN-944-1
gnuclibrary-encodenamemacro-dos(59240)
http://frugalware.org/security/662
http://sourceware.org/git/?p=glibc.git;a=commit;h=ab00f4eac8f4932211259ff87be83144f5211540
http://www.vmware.com/security/advisories/VMSA-2011-0012.html
https://bugzilla.redhat.com/show_bug.cgi?id=559579

CPE    39
cpe:/a:gnu:glibc:2.6.1
cpe:/a:gnu:glibc:2.3.6
cpe:/a:gnu:glibc:2.3.5
cpe:/a:gnu:glibc:2.5.1
...
CWE    1
CWE-20
OVAL    10
oval:org.secpod.oval:def:300095
oval:org.secpod.oval:def:700063
oval:org.secpod.oval:def:600013
oval:org.secpod.oval:def:300000
...

© 2013 SecPod Technologies