Published: 01/06/2010 Updated: 13/02/2023

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 642

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and previous versions, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu glibc 2.2.2
gnu glibc 2.9
gnu glibc 2.7
gnu glibc 2.1.2
gnu glibc 2.11
gnu glibc 2.0.5
gnu glibc 2.2.5
gnu glibc 2.0.6
gnu glibc 2.10.1
gnu glibc 2.1.1
gnu glibc 2.0.3
gnu glibc 2.3.1
gnu glibc 2.3
gnu glibc 2.0
gnu glibc 2.1.1.6
gnu glibc 2.3.10
gnu glibc 2.4
gnu glibc 2.1
gnu glibc 2.3.4
gnu glibc 2.1.9
gnu glibc 2.3.3
gnu glibc 2.6.1
gnu glibc 2.0.1
gnu glibc 2.10
gnu glibc 2.5.1
gnu glibc 2.6
gnu glibc 2.0.4
gnu glibc 2.0.2
gnu glibc 2.2.1
gnu glibc 2.3.2
gnu glibc
gnu glibc 2.3.6
gnu glibc 2.2.3
gnu glibc 2.5
gnu glibc 2.3.5
gnu glibc 2.8
gnu glibc 2.2.4
gnu glibc 2.1.3
gnu glibc 2.2

Synopsis Moderate: glibc security and bug fix update Type/Severity Security Advisory: Moderate Topic Updated glibc packages that fix multiple security issues and one bug arenow available for Red Hat Enterprise Linux 4The Red Hat Security Response Team has rated this update as having moderatesecurity impact ...

Debian Bug report logs - #583908 CVE-2010-0296: GNU Glibc mntent Newline Processing Error Lets Local Users Gain Elevated Privileges Package: libc6; Maintainer for libc6 is GNU Libc Maintainers <debian-glibc@listsdebianorg>; Source for libc6 is src:glibc (PTS, buildd, popcon) Reported by: Bernd Zeimetz <bzed@debianorg&g ...

The GNU C library did not correctly handle certain mnt entries, strfmon arguments, and ELF program headers ...

The industrial managed switch series 852 from WAGO is affected by multiple vulnerabilities such as old software components embedded in the firmware Furthermore, hardcoded password hashes and credentials were also found by doing an automated scan with IoT Inspector ...

Full Disclosure mailing list archives   By Date By Thread </form>    SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series <!--X-Subject-Heade ...

CWE-20 http://www.ubuntu.com/usn/USN-944-1 https://bugzilla.redhat.com/show_bug.cgi?id=559579 http://secunia.com/advisories/39900 http://frugalware.org/security/662 http://www.vupen.com/english/advisories/2010/1246 http://securitytracker.com/id?1024043 http://www.mandriva.com/security/advisories?name=MDVSA-2010:112 http://www.mandriva.com/security/advisories?name=MDVSA-2010:111 http://www.debian.org/security/2010/dsa-2058 http://security.gentoo.org/glsa/glsa-201011-01.xml http://secunia.com/advisories/43830 http://www.redhat.com/support/errata/RHSA-2011-0412.html http://www.vupen.com/english/advisories/2011/0863 http://secunia.com/advisories/46397 http://www.vmware.com/security/advisories/VMSA-2011-0012.html https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html https://exchange.xforce.ibmcloud.com/vulnerabilities/59240 http://www.securityfocus.com/archive/1/520102/100/0/threaded http://seclists.org/fulldisclosure/2019/Jun/18 https://seclists.org/bugtraq/2019/Jun/14 http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html http://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=ab00f4eac8f4932211259ff87be83144f5211540 https://access.redhat.com/errata/RHSA-2012:0125 https://usn.ubuntu.com/944-1/https://nvd.nist.gov

CVE-2010-0296

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Mailing Lists

References

Vulmon Search

About

Products

Connect