Lucene search

K
nvd[email protected]NVD:CVE-2011-1749
HistoryFeb 26, 2014 - 3:55 p.m.

CVE-2011-1749

2014-02-2615:55:06
CWE-20
web.nvd.nist.gov
1

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

8.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

Affected configurations

NVD
Node
linux-nfsnfs-utilsRange1.2.3
OR
linux-nfsnfs-utilsMatch1.2.0
OR
linux-nfsnfs-utilsMatch1.2.1
OR
linux-nfsnfs-utilsMatch1.2.2

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

8.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%