CVE-2010-2961

Published: Sep 14, 2010Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain privileges by modifying this file.

Affected (2)

Products: Scott James Remnant: Mountall

Scott James Remnant

1 product

Mountall

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Scott James Remnant Mountall	Up to 2.14
Scott James Remnant Mountall	Version 1.0

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (10)

http://secunia.com/advisories/41351

Source: security@ubuntu.com

Vendor Advisory

http://www.osvdb.org/67914

Source: security@ubuntu.com

http://www.ubuntu.com/usn/USN-985-1

Source: security@ubuntu.com

http://www.vupen.com/english/advisories/2010/2342

Source: security@ubuntu.com

Vendor Advisory

https://bugs.launchpad.net/ubuntu/+source/mountall/+bug/591807

Source: security@ubuntu.com

http://secunia.com/advisories/41351