CVE - CVE-2010-0296

CVE-ID
CVE-2010-0296	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1024043 URL:http://securitytracker.com/id?1024043 MISC:20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console URL:http://www.securityfocus.com/archive/1/520102/100/0/threaded MISC:20190612 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series URL:http://seclists.org/fulldisclosure/2019/Jun/18 MISC:20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series URL:https://seclists.org/bugtraq/2019/Jun/14 MISC:39900 URL:http://secunia.com/advisories/39900 MISC:43830 URL:http://secunia.com/advisories/43830 MISC:46397 URL:http://secunia.com/advisories/46397 MISC:ADV-2010-1246 URL:~~http://www.vupen.com/english/advisories/2010/1246~~ (Obsolete source) MISC:ADV-2011-0863 URL:~~http://www.vupen.com/english/advisories/2011/0863~~ (Obsolete source) MISC:DSA-2058 URL:http://www.debian.org/security/2010/dsa-2058 MISC:GLSA-201011-01 URL:http://security.gentoo.org/glsa/glsa-201011-01.xml MISC:MDVSA-2010:111 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2010:111~~ (Obsolete source) MISC:MDVSA-2010:112 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2010:112~~ (Obsolete source) MISC:RHSA-2011:0412 URL:http://www.redhat.com/support/errata/RHSA-2011-0412.html MISC:SUSE-SA:2010:052 URL:https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html MISC:USN-944-1 URL:http://www.ubuntu.com/usn/USN-944-1 MISC:gnuclibrary-encodenamemacro-dos(59240) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/59240 MISC:http://frugalware.org/security/662 URL:http://frugalware.org/security/662 MISC:http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html URL:http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html MISC:http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=ab00f4eac8f4932211259ff87be83144f5211540 URL:http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=ab00f4eac8f4932211259ff87be83144f5211540 MISC:http://www.vmware.com/security/advisories/VMSA-2011-0012.html URL:http://www.vmware.com/security/advisories/VMSA-2011-0012.html MISC:https://bugzilla.redhat.com/show_bug.cgi?id=559579 URL:https://bugzilla.redhat.com/show_bug.cgi?id=559579
Assigning CNA
Red Hat, Inc.
Date Record Created
20100112	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20100112)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)