Vulnerability Details CVE-2004-2610
mntd_mount.c in mntd before 0.4.2 might allow local users to gain privileges via shell metacharacters in a remount option in the configuration file. NOTE: It is not clear whether this is a vulnerability because there is not necessarily any common usage in which privilege boundaries are crossed. Typical usage would restrict write access to the configuration file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 36.3%
CVSS Severity
CVSS v2 Score 4.6
References
- http://prdownloads.sourceforge.net/mntd/mntd-0.4.2.tar.gz?download
- http://securitytracker.com/id?1011088
- http://www.osvdb.org/9380
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17149
- http://prdownloads.sourceforge.net/mntd/mntd-0.4.2.tar.gz?download
- http://securitytracker.com/id?1011088
- http://www.osvdb.org/9380
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17149
Products affected by CVE-2004-2610
-
cpe:2.3:a:stefan_bambach:mntd:0.3.4
-
cpe:2.3:a:stefan_bambach:mntd:0.3.5
-
cpe:2.3:a:stefan_bambach:mntd:0.4.0
-
cpe:2.3:a:stefan_bambach:mntd:0.4.1