CVE

Id
60104  
CVE No.
CVE-2013-0157  
Status
Candidate  
Description
(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.  
Phase
Assigned (20121206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
606735 60104 CVE-2013-0157 MLIST:[oss-security] 20130106 Re: CVE request: mount/umount leak information about existence of folders  View
606736 60104 CVE-2013-0157 URL:http://marc.info/?l=oss-security&m=135749410312247&w=2  View
606737 60104 CVE-2013-0157 CONFIRM:http://bugs.debian.org/697464  View
606738 60104 CVE-2013-0157 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=892330  View
606739 60104 CVE-2013-0157 MANDRIVA:MDVSA-2013:154  View
606740 60104 CVE-2013-0157 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:154  View
606741 60104 CVE-2013-0157 REDHAT:RHSA-2013:0517  View
606742 60104 CVE-2013-0157 URL:http://rhn.redhat.com/errata/RHSA-2013-0517.html  View
606743 60104 CVE-2013-0157 OSVDB:88953  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20145 JVNDB-2013-001720 Ruby 用 ruby_parser gem における任意のファイルを上書きされる脆弱性 Ruby 用 ruby_parser gem の lib/gauntlet_rubyparser.rb 内の diff_pp 関数には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2013-0162 60104 2.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001720.html  View