CVE - CVE-2005-2876

CVE-ID
CVE-2005-2876	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:101960 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-26-101960-1~~ (Obsolete source) MISC:14816 URL:http://www.securityfocus.com/bid/14816 MISC:16785 URL:http://secunia.com/advisories/16785 MISC:16988 URL:http://secunia.com/advisories/16988 MISC:17004 URL:http://secunia.com/advisories/17004 MISC:17027 URL:http://secunia.com/advisories/17027 MISC:17133 URL:http://secunia.com/advisories/17133 MISC:17154 URL:http://secunia.com/advisories/17154 MISC:18502 URL:http://secunia.com/advisories/18502 MISC:19369 URL:~~http://www.osvdb.org/19369~~ (Obsolete source) MISC:2005-0049 URL:http://marc.info/?l=bugtraq&m=112690609622266&w=2 MISC:20050912 util-linux: unintentional grant of privileges by umount URL:http://marc.info/?l=bugtraq&m=112656096125857&w=2 MISC:DSA-823 URL:http://www.debian.org/security/2005/dsa-823 MISC:DSA-825 URL:http://www.debian.org/security/2005/dsa-825 MISC:FLSA:168326 URL:http://www.securityfocus.com/archive/1/419774/100/0/threaded MISC:SUSE-SR:2005:021 URL:http://www.novell.com/linux/security/advisories/2005_21_sr.html MISC:USN-184 URL:http://www.ubuntu.com/usn/usn-184-1 MISC:http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm URL:http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm MISC:oval:org.mitre.oval:def:10921 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10921 MISC:utillinux-umount-gain-privileges(22241) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/22241
Assigning CNA
Red Hat, Inc.
Date Record Created
20050913	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20050913)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)