3.3

CVE-2011-1749

The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux-nfs ≫ Nfs-utils Version <= 1.2.3
Linux-nfs ≫ Nfs-utils Version1.2.0
Linux-nfs ≫ Nfs-utils Version1.2.1
Linux-nfs ≫ Nfs-utils Version1.2.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.275
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 3.3 3.4 4.9
AV:L/AC:M/Au:N/C:N/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://rhn.redhat.com/errata/RHSA-2011-1534.html
http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/Changelog-nfs-utils-1.2.4/download
Patch
http://rhn.redhat.com/errata/RHSA-2012-0310.html
Patch
http://www.openwall.com/lists/oss-security/2011/04/25/5
https://bugzilla.redhat.com/show_bug.cgi?id=697975