NVD

Id
11862  
Name
CVE-2010-0296  
Description
The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-06-01  
Modified Date
2016-12-06  
Seq
2010-0296  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
65398 11862 CVE-2010-0296 http://frugalware.org/security/662  View
65399 11862 CVE-2010-0296 GLSA-201011-01  View
65400 11862 CVE-2010-0296 1024043  View
65401 11862 CVE-2010-0296 http://sourceware.org/git/?p=glibc.git;a=commit;h=ab00f4eac8f4932211259ff87be83144f5211540  View
65402 11862 CVE-2010-0296 DSA-2058  View
65403 11862 CVE-2010-0296 MDVSA-2010:111  View
65404 11862 CVE-2010-0296 MDVSA-2010:112  View
65405 11862 CVE-2010-0296 RHSA-2011:0412  View
65406 11862 CVE-2010-0296 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
65407 11862 CVE-2010-0296 USN-944-1  View
65408 11862 CVE-2010-0296 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
65409 11862 CVE-2010-0296 ADV-2010-1246  View
65410 11862 CVE-2010-0296 ADV-2011-0863  View
65411 11862 CVE-2010-0296 gnuclibrary-encodenamemacro-dos(59240)  View
65412 11862 CVE-2010-0296 https://bugzilla.redhat.com/show_bug.cgi?id=559579  View
65413 11862 CVE-2010-0296 SUSE-SA:2010:052  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37025 JVNDB-2010-002805 GNU C Library の encode_name マクロにおける権限を取得される脆弱性 GNU C Library (glibc or libc6) の misc/mntent_r.c 内にある encode_name マクロは、マウントポイント名に含まれる改行文字を適切に処理しないため、サービス運用妨害 (mtab の破損) 状態となる、またはマウントのオプションを改ざんされ、権限を取得される脆弱性が存在します。 CVE-2010-0296 42876 CVE-2010-0296 11862 7.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002805.html 2010-06-01 2012-12-18 View