CVEvulnerability
CVE-2014-1421
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-11-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
mountall 1.54, as used in Ubuntu 14.10, does not properly handle the umask when using the mount utility, which allows local users to bypass intended access restrictions via unspecified vectors.
Affected configurations
• canonical ubuntu linux 14.10
Related
Weakness · not in database (1)
References
- http://www.ubuntu.com/usn/USN-2411-1 Vendor Advisory
- http://www.ubuntu.com/usn/USN-2411-1 Vendor Advisory