The seunshare_mount function in sandbox/seunshare.c in seunshare in certain Red Hat packages of policycoreutils 2.0.83 and previous versions in Red Hat Enterprise Linux (RHEL) 6 and previous versions, and Fedora 14 and previous versions, mounts a new directory on top of /tmp without assigning root ownership and the sticky bit to this new directory, which allows local users to replace or delete arbitrary /tmp files, and consequently cause a denial of service or possibly gain privileges, by running a setuid application that relies on /tmp, as demonstrated by the ksu application.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
redhat policycoreutils |
||
redhat policycoreutils 1.0 |
||
redhat policycoreutils 1.1 |
||
redhat policycoreutils 1.2 |
||
redhat policycoreutils 1.4 |
||
redhat policycoreutils 1.6 |
||
redhat policycoreutils 1.8 |
||
redhat policycoreutils 1.10 |
||
redhat policycoreutils 1.12 |
||
redhat policycoreutils 1.14 |
||
redhat policycoreutils 1.16 |
||
redhat policycoreutils 1.18 |
||
redhat policycoreutils 1.20 |
||
redhat policycoreutils 1.21.1 |
||
redhat policycoreutils 1.21.2 |
||
redhat policycoreutils 1.21.3 |
||
redhat policycoreutils 1.21.4 |
||
redhat policycoreutils 1.21.5 |
||
redhat policycoreutils 1.21.6 |
||
redhat policycoreutils 1.21.7 |
||
redhat policycoreutils 1.21.8 |
||
redhat policycoreutils 1.21.9 |
||
redhat policycoreutils 1.21.10 |
||
redhat policycoreutils 1.21.11 |
||
redhat policycoreutils 1.21.12 |
||
redhat policycoreutils 1.21.13 |
||
redhat policycoreutils 1.21.14 |
||
redhat policycoreutils 1.21.15 |
||
redhat policycoreutils 1.21.16 |
||
redhat policycoreutils 1.21.17 |
||
redhat policycoreutils 1.21.18 |
||
redhat policycoreutils 1.21.19 |
||
redhat policycoreutils 1.21.20 |
||
redhat policycoreutils 1.21.21 |
||
redhat policycoreutils 1.21.22 |
||
redhat policycoreutils 1.22 |
||
redhat policycoreutils 1.23.1 |
||
redhat policycoreutils 1.23.2 |
||
redhat policycoreutils 1.23.3 |
||
redhat policycoreutils 1.23.4 |
||
redhat policycoreutils 1.23.5 |
||
redhat policycoreutils 1.23.6 |
||
redhat policycoreutils 1.23.7 |
||
redhat policycoreutils 1.23.8 |
||
redhat policycoreutils 1.23.9 |
||
redhat policycoreutils 1.23.10 |
||
redhat policycoreutils 1.23.11 |
||
redhat policycoreutils 1.24 |
||
redhat policycoreutils 1.25.1 |
||
redhat policycoreutils 1.25.2 |
||
redhat policycoreutils 1.25.3 |
||
redhat policycoreutils 1.25.4 |
||
redhat policycoreutils 1.25.5 |
||
redhat policycoreutils 1.25.6 |
||
redhat policycoreutils 1.25.7 |
||
redhat policycoreutils 1.25.8 |
||
redhat policycoreutils 1.25.9 |
||
redhat policycoreutils 1.26 |
||
redhat policycoreutils 1.27.1 |
||
redhat policycoreutils 1.27.2 |
||
redhat policycoreutils 1.27.3 |
||
redhat policycoreutils 1.27.4 |
||
redhat policycoreutils 1.27.5 |
||
redhat policycoreutils 1.27.6 |
||
redhat policycoreutils 1.27.7 |
||
redhat policycoreutils 1.27.8 |
||
redhat policycoreutils 1.27.9 |
||
redhat policycoreutils 1.27.10 |
||
redhat policycoreutils 1.27.11 |
||
redhat policycoreutils 1.27.12 |
||
redhat policycoreutils 1.27.13 |
||
redhat policycoreutils 1.27.14 |
||
redhat policycoreutils 1.27.15 |
||
redhat policycoreutils 1.27.16 |
||
redhat policycoreutils 1.27.17 |
||
redhat policycoreutils 1.27.18 |
||
redhat policycoreutils 1.27.19 |
||
redhat policycoreutils 1.27.20 |
||
redhat policycoreutils 1.27.21 |
||
redhat policycoreutils 1.27.22 |
||
redhat policycoreutils 1.27.23 |
||
redhat policycoreutils 1.27.24 |
||
redhat policycoreutils 1.27.25 |
||
redhat policycoreutils 1.27.26 |
||
redhat policycoreutils 1.27.27 |
||
redhat policycoreutils 1.27.28 |
||
redhat policycoreutils 1.27.29 |
||
redhat policycoreutils 1.27.30 |
||
redhat policycoreutils 1.27.31 |
||
redhat policycoreutils 1.27.32 |
||
redhat policycoreutils 1.27.33 |
||
redhat policycoreutils 1.27.34 |
||
redhat policycoreutils 1.27.35 |
||
redhat policycoreutils 1.27.36 |
||
redhat policycoreutils 1.27.37 |
||
redhat policycoreutils 1.28 |
||
redhat policycoreutils 1.29.1 |
||
redhat policycoreutils 1.29.2 |
||
redhat policycoreutils 1.29.3 |
||
redhat policycoreutils 1.29.4 |
||
redhat policycoreutils 1.29.5 |
||
redhat policycoreutils 1.29.6 |
||
redhat policycoreutils 1.29.7 |
||
redhat policycoreutils 1.29.8 |
||
redhat policycoreutils 1.29.9 |
||
redhat policycoreutils 1.29.10 |
||
redhat policycoreutils 1.29.11 |
||
redhat policycoreutils 1.29.12 |
||
redhat policycoreutils 1.29.13 |
||
redhat policycoreutils 1.29.14 |
||
redhat policycoreutils 1.29.15 |
||
redhat policycoreutils 1.29.16 |
||
redhat policycoreutils 1.29.17 |
||
redhat policycoreutils 1.29.18 |
||
redhat policycoreutils 1.29.19 |
||
redhat policycoreutils 1.29.20 |
||
redhat policycoreutils 1.29.21 |
||
redhat policycoreutils 1.29.22 |
||
redhat policycoreutils 1.29.23 |
||
redhat policycoreutils 1.29.24 |
||
redhat policycoreutils 1.29.25 |
||
redhat policycoreutils 1.29.26 |
||
redhat policycoreutils 1.29.27 |
||
redhat policycoreutils 1.29.28 |
||
redhat policycoreutils 1.30 |
||
redhat policycoreutils 1.30.1 |
||
redhat policycoreutils 1.30.2 |
||
redhat policycoreutils 1.30.3 |
||
redhat policycoreutils 1.30.4 |
||
redhat policycoreutils 1.30.5 |
||
redhat policycoreutils 1.30.6 |
||
redhat policycoreutils 1.30.7 |
||
redhat policycoreutils 1.30.8 |
||
redhat policycoreutils 1.30.9 |
||
redhat policycoreutils 1.30.10 |
||
redhat policycoreutils 1.30.11 |
||
redhat policycoreutils 1.30.12 |
||
redhat policycoreutils 1.30.13 |
||
redhat policycoreutils 1.30.14 |
||
redhat policycoreutils 1.30.15 |
||
redhat policycoreutils 1.30.16 |
||
redhat policycoreutils 1.30.17 |
||
redhat policycoreutils 1.30.18 |
||
redhat policycoreutils 1.30.19 |
||
redhat policycoreutils 1.30.20 |
||
redhat policycoreutils 1.30.21 |
||
redhat policycoreutils 1.30.22 |
||
redhat policycoreutils 1.30.23 |
||
redhat policycoreutils 1.30.24 |
||
redhat policycoreutils 1.30.25 |
||
redhat policycoreutils 1.30.26 |
||
redhat policycoreutils 1.30.27 |
||
redhat policycoreutils 1.30.28 |
||
redhat policycoreutils 1.30.29 |
||
redhat policycoreutils 1.30.30 |
||
redhat policycoreutils 1.30.31 |
||
redhat policycoreutils 1.32 |
||
redhat policycoreutils 1.33.1 |
||
redhat policycoreutils 1.33.2 |
||
redhat policycoreutils 1.33.3 |
||
redhat policycoreutils 1.33.4 |
||
redhat policycoreutils 1.33.5 |
||
redhat policycoreutils 1.33.6 |
||
redhat policycoreutils 1.33.7 |
||
redhat policycoreutils 1.33.8 |
||
redhat policycoreutils 1.33.9 |
||
redhat policycoreutils 1.33.10 |
||
redhat policycoreutils 1.33.11 |
||
redhat policycoreutils 1.33.12 |
||
redhat policycoreutils 1.33.13 |
||
redhat policycoreutils 1.33.14 |
||
redhat policycoreutils 1.33.15 |
||
redhat policycoreutils 1.33.16 |
||
redhat policycoreutils 1.34.0 |
||
redhat policycoreutils 1.34.1 |
||
redhat policycoreutils 2.0.0 |
||
redhat policycoreutils 2.0.1 |
||
redhat policycoreutils 2.0.2 |
||
redhat policycoreutils 2.0.3 |
||
redhat policycoreutils 2.0.4 |
||
redhat policycoreutils 2.0.5 |
||
redhat policycoreutils 2.0.6 |
||
redhat policycoreutils 2.0.7 |
||
redhat policycoreutils 2.0.8 |
||
redhat policycoreutils 2.0.9 |
||
redhat policycoreutils 2.0.10 |
||
redhat policycoreutils 2.0.11 |
||
redhat policycoreutils 2.0.12 |
||
redhat policycoreutils 2.0.13 |
||
redhat policycoreutils 2.0.14 |
||
redhat policycoreutils 2.0.15 |
||
redhat policycoreutils 2.0.16 |
||
redhat policycoreutils 2.0.17 |
||
redhat policycoreutils 2.0.18 |
||
redhat policycoreutils 2.0.19 |
||
redhat policycoreutils 2.0.20 |
||
redhat policycoreutils 2.0.21 |
||
redhat policycoreutils 2.0.22 |
||
redhat policycoreutils 2.0.23 |
||
redhat policycoreutils 2.0.24 |
||
redhat policycoreutils 2.0.25 |
||
redhat policycoreutils 2.0.26 |
||
redhat policycoreutils 2.0.27 |
||
redhat policycoreutils 2.0.28 |
||
redhat policycoreutils 2.0.29 |
||
redhat policycoreutils 2.0.30 |
||
redhat policycoreutils 2.0.31 |
||
redhat policycoreutils 2.0.32 |
||
redhat policycoreutils 2.0.33 |
||
redhat policycoreutils 2.0.34 |
||
redhat policycoreutils 2.0.35 |
||
redhat policycoreutils 2.0.36 |
||
redhat policycoreutils 2.0.37 |
||
redhat policycoreutils 2.0.38 |
||
redhat policycoreutils 2.0.39 |
||
redhat policycoreutils 2.0.40 |
||
redhat policycoreutils 2.0.41 |
||
redhat policycoreutils 2.0.42 |
||
redhat policycoreutils 2.0.43 |
||
redhat policycoreutils 2.0.44 |
||
redhat policycoreutils 2.0.45 |
||
redhat policycoreutils 2.0.46 |
||
redhat policycoreutils 2.0.47 |
||
redhat policycoreutils 2.0.48 |
||
redhat policycoreutils 2.0.49 |
||
redhat policycoreutils 2.0.50 |
||
redhat policycoreutils 2.0.51 |
||
redhat policycoreutils 2.0.52 |
||
redhat policycoreutils 2.0.53 |
||
redhat policycoreutils 2.0.54 |
||
redhat policycoreutils 2.0.55 |
||
redhat policycoreutils 2.0.56 |
||
redhat policycoreutils 2.0.57 |
||
redhat policycoreutils 2.0.58 |
||
redhat policycoreutils 2.0.59 |
||
redhat policycoreutils 2.0.60 |
||
redhat policycoreutils 2.0.61 |
||
redhat policycoreutils 2.0.62 |
||
redhat policycoreutils 2.0.63 |
||
redhat policycoreutils 2.0.64 |
||
redhat policycoreutils 2.0.65 |
||
redhat policycoreutils 2.0.66 |
||
redhat policycoreutils 2.0.67 |
||
redhat policycoreutils 2.0.68 |
||
redhat policycoreutils 2.0.69 |
||
redhat policycoreutils 2.0.70 |
||
redhat policycoreutils 2.0.71 |
||
redhat policycoreutils 2.0.72 |
||
redhat policycoreutils 2.0.73 |
||
redhat policycoreutils 2.0.74 |
||
redhat policycoreutils 2.0.75 |
||
redhat policycoreutils 2.0.76 |
||
redhat policycoreutils 2.0.77 |
||
redhat policycoreutils 2.0.78 |
||
redhat policycoreutils 2.0.79 |
||
redhat policycoreutils 2.0.80 |
||
redhat policycoreutils 2.0.81 |
||
redhat policycoreutils 2.0.82 |
||
redhat enterprise_linux 3 |
||
redhat enterprise_linux 4 |
||
redhat enterprise_linux 5 |
||
redhat enterprise_linux 6.0 |
||
redhat fedora 6 |
||
redhat fedora 7 |
||
redhat fedora 8 |
||
redhat fedora 9 |
||
redhat fedora 10 |
||
redhat fedora 12 |
||
redhat fedora 13 |
||
redhat fedora 14 |