« Volver al listado

CVE-2011-1676

Estado: ModificadaBaja (3.3)—

mount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed attempt to add a mount entry, which allows local users to trigger corruption of the /etc/mtab file via multiple invocations.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-1676",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.3,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-04-10T02:55:01.977",
  "references": [
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/04/10",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/04/11",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/04/12",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/04/9",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/05/3",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/05/7",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/07/9",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/14/16",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/14/5",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/14/7",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/15/6",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/22/4",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/22/6",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/31/3",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/31/4",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/04/01/2",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=688980",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66704",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/04/10",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/04/11",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/04/12",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/04/9",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/05/3",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/05/7",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/07/9",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/14/16",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/14/5",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/14/7",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/15/6",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/22/4",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/22/6",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/31/3",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/03/31/4",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/04/01/2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=688980",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66704",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "mount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed attempt to add a mount entry, which allows local users to trigger corruption of the /etc/mtab file via multiple invocations."
    },
    {
      "lang": "es",
      "value": "mount in util-linux v2.19 y anteriores no elimina el fichero /etc/mtab.tmp después de un intento fallido de añadir un punto de montaje, lo que permite a usuarios locales provocar una corrupción del fichero /etc/mtab mediante múltiples llamadas."
    }
  ],
  "lastModified": "2026-06-16T23:29:48.127",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:linux:util-linux:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "60DFC5FF-1ABB-4D06-8560-E47906167008",
              "versionEndIncluding": "2.19"
            },
            {
              "criteria": "cpe:2.3:a:linux:util-linux:2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F0DF11CD-62F9-4987-93F6-8012C63B289C"
            },
            {
              "criteria": "cpe:2.3:a:linux:util-linux:2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A6112B77-093B-431E-96A9-96BBC0823C76"
            },
            {
              "criteria": "cpe:2.3:a:linux:util-linux:2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "797A1C0F-D246-41A2-91D2-5563E4578D34"
            },
            {
              "criteria": "cpe:2.3:a:linux:util-linux:2.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD69B2A5-614A-435A-92C4-1E2121D4C175"
            },
            {
              "criteria": "cpe:2.3:a:linux:util-linux:2.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4BE902C9-4305-481A-8455-077436F42ECC"
            },
            {
              "criteria": "cpe:2.3:a:linux:util-linux:2.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A9F9C93-3286-4C3C-B41A-86E71FA38E0D"
            },
            {
              "criteria": "cpe:2.3:a:linux:util-linux:2.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FCECA06B-7844-482D-A726-2AD89D34C372"
            },
            {
              "criteria": "cpe:2.3:a:linux:util-linux:2.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "437651F4-1017-430B-A824-E3C2EEEDB56D"
            },
            {
              "criteria": "cpe:2.3:a:linux:util-linux:2.12:pre:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B8DBBF88-CD87-4AC7-9FEE-542C370DAE94"
            },
            {
              "criteria": "cpe:2.3:a:linux:util-linux:2.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "393F4032-A538-489F-8643-27608E4D51B4"
            },
            {
              "criteria": "cpe:2.3:a:linux:util-linux:2.13:pre:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87EC9E05-7338-4261-A956-07CC209E4464"
            },
            {
              "criteria": "cpe:2.3:a:linux:util-linux:2.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "206B8BAA-C7EE-464A-BCCE-8A56B45C2A6D"
            },
            {
              "criteria": "cpe:2.3:a:linux:util-linux:2.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "55F6C45C-5EF1-49F0-99E7-D51E39DD5D93"
            },
            {
              "criteria": "cpe:2.3:a:linux:util-linux:2.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "459F34A9-078A-4B7D-95B9-C2ED16733B0D"
            },
            {
              "criteria": "cpe:2.3:a:linux:util-linux:2.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27CE48D2-785D-46C4-A8F3-5EC12A02C565"
            },
            {
              "criteria": "cpe:2.3:a:linux:util-linux:2.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7193DFEA-3B0D-4E45-B262-E0078549FB2E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}