Download
| Alert*
DSA-4134-1 util-linux -- util-linux
Bjorn Bosselmann discovered that the umount bash completion from util-linux does not properly handle embedded shell commands in a mountpoint name. An attacker with rights to mount filesystems can take advantage of this flaw for privilege escalation if a user is tricked into using the umount completion while a specially crafted mount is present.
|