mountall could mount certain filesystems with the wrong permissions.. =========================================================================Ubuntu Security Notice USN-2411-1 November 18, 2014 mountall vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.10 Summary: mountall could mount certain filesystems with the wrong permissions. Software Description: - mountall: filesystem mounting tool Details: Saurav Sengupta discovered that mountall incorrectly handled umask when calling the mount utility, resulting in certain filesystems possibly being mounted with incorrect permissions. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.10: mountall 2.54ubuntu0.14.10.1 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2411-1 CVE-2014-1421 Package Information: https://launchpad.net/ubuntu/+source/mountall/2.54ubuntu0.14.10.1 . It is essential to update your system promptly to resolve the mountall vulnerability on Ubuntu 14.10 that results in improper filesystem access permissions.. mountall vulnerability, Ubuntu mountall fix, filesystem permissions issue. . Severity: Critical. LinuxSecurity.com Team
Alasdair MacGregor discovered that mountall created a udev rule filewith world-writable permissions. A local attacker could exploit thisunder certain conditions to cause udev to execute arbitrary commands asthe root user. [More...]. ==========================================================Ubuntu Security Notice USN-985-1 September 08, 2010 mountall vulnerability CVE-2010-2961 ========================================================== A security issue affects the following Ubuntu releases: Ubuntu 10.04 LTS This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 10.04 LTS: mountall 2.15.2 In general, a standard system update will make all the necessary changes. Details follow: Alasdair MacGregor discovered that mountall created a udev rule file with world-writable permissions. A local attacker could exploit this under certain conditions to cause udev to execute arbitrary commands as the root user. Updated packages for Ubuntu 10.04: Source archives: Size/MD5: 972 92e488f0e51ab3c20ddf537fdc92fd24 Size/MD5: 564582 036e6a108a9bc0c2155a7226ad5437c3 amd64 architecture (Athlon64, Opteron, EM64T Xeon): Size/MD5: 56016 76dc051afb8a20077f0c0b709369d6c0 i386 architecture (x86 compatible Intel/AMD): Size/MD5: 52384 42ebb3fa3f81ed1a08270d48a8f6b367 powerpc architecture (Apple Macintosh G3/G4/G5): Size/MD5: 55780 cf51c1268b9b188150f9d2131882d8bb sparc architecture (Sun SPARC/UltraSPARC): Size/MD5: 56758 276c85acaf4feaa54c53615f0a572b8b . Critical Ubuntu Security Notice USN-987-1 highlights a profound vulnerability within mountall, making local system attacks a grave concern and allowing unauthorized command execution.. mountall Vulnerability, Ubuntu 10.04 Security Advisory, Local Attack Threat. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.