National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

    Vulnerabilities Detail

CVE-2011-1675 Detail

Description

mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

Source:  MITRE      Last Modified:  04/09/2011

Quick Info

CVE Dictionary Entry:
CVE-2011-1675
Original release date:
04/09/2011
Last revised:
08/16/2017
Source:
US-CERT/NIST

Impact

CVSS Severity (version 2.0):
CVSS v2 Base Score:
3.3 LOW
Vector:
(AV:L/AC:M/Au:N/C:P/I:P/A:N) (legend)
Impact Subscore:
4.9
Exploitability Subscore:
3.4
CVSS Version 2 Metrics:
Access Vector:
Locally exploitable
Access Complexity:
Medium
Authentication:
Not required to exploit
Impact Type:
Allows unauthorized disclosure of information; Allows unauthorized modification

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Hyperlink Resource Type Source Name
http://openwall.com/lists/oss-security/2011/03/04/10 Mailing List; Third Party Advisory External Source MLIST [oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE
http://openwall.com/lists/oss-security/2011/03/04/11 Mailing List; Third Party Advisory External Source MLIST [oss-security] 20110303 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE
http://openwall.com/lists/oss-security/2011/03/04/12 Mailing List; Third Party Advisory External Source MLIST [oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE
http://openwall.com/lists/oss-security/2011/03/04/9 Mailing List; Third Party Advisory External Source MLIST [oss-security] 20110303 Suid mount helpers fail to anticipate RLIMIT_FSIZE
http://openwall.com/lists/oss-security/2011/03/05/3 Mailing List; Third Party Advisory External Source MLIST [oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE
http://openwall.com/lists/oss-security/2011/03/05/7 Mailing List; Third Party Advisory External Source MLIST [oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE
http://openwall.com/lists/oss-security/2011/03/07/9 Mailing List; Third Party Advisory External Source MLIST [oss-security] 20110307 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE
http://openwall.com/lists/oss-security/2011/03/14/16 Mailing List; Third Party Advisory External Source MLIST [oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE
http://openwall.com/lists/oss-security/2011/03/14/5 Mailing List; Third Party Advisory External Source MLIST [oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE
http://openwall.com/lists/oss-security/2011/03/14/7 Mailing List; Third Party Advisory External Source MLIST [oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE
http://openwall.com/lists/oss-security/2011/03/15/6 Mailing List; Third Party Advisory External Source MLIST [oss-security] 20110315 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE
http://openwall.com/lists/oss-security/2011/03/22/4 Mailing List; Third Party Advisory External Source MLIST [oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE
http://openwall.com/lists/oss-security/2011/03/22/6 Mailing List; Third Party Advisory External Source MLIST [oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE
http://openwall.com/lists/oss-security/2011/03/31/3 Mailing List; Third Party Advisory External Source MLIST [oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE
http://openwall.com/lists/oss-security/2011/03/31/4 Mailing List; Third Party Advisory External Source MLIST [oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE
http://openwall.com/lists/oss-security/2011/04/01/2 Mailing List; Third Party Advisory External Source MLIST [oss-security] 20110401 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE
http://www.redhat.com/support/errata/RHSA-2011-1691.html Third Party Advisory External Source REDHAT RHSA-2011:1691
https://bugzilla.redhat.com/show_bug.cgi?id=688980 Issue Tracking External Source MISC https://bugzilla.redhat.com/show_bug.cgi?id=688980
https://exchange.xforce.ibmcloud.com/vulnerabilities/66705 External Source XF utillinux-mtab-security-bypass(66705)

Technical Details

Vulnerability Type (View All)

  • Resource Management Errors (CWE-399)

Change History 4 change records found - show changes