CVE-2008-3970

pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restrictions via a local mount.

• pam mount pam mount 0.10 • pam mount pam mount 0.11 • pam mount pam mount 0.12.2 • pam mount pam mount 0.13 • pam mount pam mount 0.15 • pam mount pam mount 0.16 • pam mount pam mount 0.17 • pam mount pam mount 0.18 • pam mount pam mount 0.19 • pam mount pam mount 0.20 • pam mount pam mount 0.21 • pam mount pam mount 0.26 • pam mount pam mount 0.27 • pam mount pam mount 0.28 • pam mount pam mount 0.29 • pam mount pam mount 0.31 • pam mount pam mount 0.32 • pam mount pam mount 0.35 • pam mount pam mount 0.35.1 • pam mount pam mount 0.37 • pam mount pam mount 0.38 • pam mount pam mount 0.39 • pam mount pam mount 0.40 • pam mount pam mount 0.41 • pam mount pam mount 0.43 • pam mount pam mount 0.44 • pam mount pam mount 0.45