NVD

Id
3832  
Name
CVE-2008-3970  
Description
pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restrictions via a local mount.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-09-10  
Modified Date
2009-08-19  
Seq
2008-3970  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
24278 3832 CVE-2008-3970 http://dev.medozas.de/gitweb.cgi?p=pam_mount;a=commitdiff;h=33b91d7659ae3aa78b1e94fd3f8e545ae5ff25db  View
24279 3832 CVE-2008-3970 SUSE-SR:2008:019  View
24280 3832 CVE-2008-3970 [pam-mount-user] 20080905 pam_mount 0.47 released  View
24281 3832 CVE-2008-3970 http://sourceforge.net/project/shownotes.php?release_id=624240  View
24282 3832 CVE-2008-3970 MDVSA-2008:208  View
24283 3832 CVE-2008-3970 [oss-security] 20080906 CVE request: pam_mount < 0.47 missing security checks  View
24284 3832 CVE-2008-3970 [oss-security] 20080909 Re: CVE request: pam_mount < 0.47 missing security checks  View
24285 3832 CVE-2008-3970 31041  View
24286 3832 CVE-2008-3970 pammount-luserconf-privilege-escalation(44960)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49531 JVNDB-2008-004841 pam_mount におけるアクセス制限を回避される脆弱性 pam_mount には、luserconf が有効になっている際、ユーザが定義したボリュームをマウントする前に mountpoint およびソースのオーナーシップを確認しないため、アクセス制限を回避される脆弱性が存在します。 CVE-2008-3970 34083 CVE-2008-3970 3832 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004841.html 2008-09-10 2012-09-25 View