|
LinuxSecurity.com: pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restrictions via a local mount. The updated packages have been patched to fix the issue.
Original Source: http://www.linuxsecurity.com/content/view/142769?rdf
Learn more about Mandriva: Subject: [Security Announce] [ MDVSA-2008:208 ] pam_mount |
