[MBT] new ticket for pkg util-linux "Possible permission problem for mount/umount"

bugs at pld.org.pl bugs at pld.org.pl
Fri Mar 28 16:57:27 CET 2003


Date: 2003-03-28 16:57:24+01	Author:  (kreutzm) <kreutzm at itp.uni-hannover.de> 
Title:         Possible permission problem for mount/umount
Ticket ID:     #623
Ticket URL:    http://bugs.pld.org.pl/?bug=623
Package:       util-linux-1:2.11w-2
Distribution:  PLD-1.0.main
Category:      security problem
Current state: opened
Text:

In SuSE-SA:2002:037 the advisory mentions the following problem:

The mount and umount program did not set their umask properly before creating the mtab file. Local attackers could abuse the mount program to put arbitrary content into the /etc/mtab file. New packages are available on our ftp servers which fix this problem. An update is                                     recommended. 

I did not find further references, but it would be great if you could have a look. Thanks.



More information about the pld-bugs mailing list