medium6.9Public exploit code
CVE-2010-2961
mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain privileges by modifying this file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- mountall 2.15.2 (Ubuntu 10.04/10.10) - Local Privilege Escalation2010-09-21 · local · linux · Verified
Impact
mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain privileges by modifying this file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Scott James Remnant | Mountall | through 2.14 Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/41351
- http://www.osvdb.org/67914
- http://www.ubuntu.com/usn/USN-985-1
- http://www.vupen.com/english/advisories/2010/2342
- https://bugs.launchpad.net/ubuntu/+source/mountall/+bug/591807
- http://secunia.com/advisories/41351
- http://www.osvdb.org/67914
- http://www.ubuntu.com/usn/USN-985-1
- http://www.vupen.com/english/advisories/2010/2342
- https://bugs.launchpad.net/ubuntu/+source/mountall/+bug/591807