Ubuntu 10.04 USN-985-1: High Risk from Local Exploit in Mountall Udev
ubuntu
September 8, 2010
Critical Ubuntu Security Notice USN-987-1 highlights a profound vulnerability within mountall, making local system attacks a grave concern and allowing unauthorized command execution.
Alasdair MacGregor discovered that mountall created a udev rule filewith world-writable permissions