CVE-2008-3970

pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows…

published September 10, 2008

CVSS
—
EPSS
0%
Percentile
23.6
In the wild
Unconfirmed
What it is

pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restrictions via a local mount.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00320 · 23.6th percentile
Published
2008-09-10T15:00Z
EPSS history
Timeline
  • 10 SEP 15:00Z
    pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows…
    cvelistv5