[MBT] new ticket for pkg util-linux "Possible permission problem for mount/umount"
bugs at pld.org.pl
bugs at pld.org.pl
Fri Mar 28 16:57:27 CET 2003
Date: 2003-03-28 16:57:24+01 Author: (kreutzm) <kreutzm at itp.uni-hannover.de>
Title: Possible permission problem for mount/umount
Ticket ID: #623
Ticket URL: http://bugs.pld.org.pl/?bug=623
Package: util-linux-1:2.11w-2
Distribution: PLD-1.0.main
Category: security problem
Current state: opened
Text:
In SuSE-SA:2002:037 the advisory mentions the following problem:
The mount and umount program did not set their umask properly before creating the mtab file. Local attackers could abuse the mount program to put arbitrary content into the /etc/mtab file. New packages are available on our ftp servers which fix this problem. An update is recommended.
I did not find further references, but it would be great if you could have a look. Thanks.
More information about the pld-bugs
mailing list