Attacker Value

Unknown

(0 users assessed)

Exploitability

Unknown

(0 users assessed)

User Interaction

Unknown

Privileges Required

Unknown

Attack Vector

Unknown

0

CVE-2011-1089

Disclosure Date: April 10, 2011 •

MITRE ATT&CK

Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small RLIMIT_FSIZE value, a different vulnerability than CVE-2010-0296.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

None

Impact Score:

Unknown

Exploitability Score:

Unknown

Vector:

Attack Vector (AV):

Unknown

Attack Complexity (AC):

Unknown

Privileges Required (PR):

Unknown

User Interaction (UI):

Unknown

Scope (S):

Unknown

Confidentiality (C):

Unknown

Integrity (I):

Unknown

Availability (A):

Unknown

References

Canonical

CVE-2011-1089 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1089)

BID-46740 (http://www.securityfocus.com/bid/46740)

Advisory

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (http://openwall.com/lists/oss-security/2011/03/14/5)

[oss-security] 20110303 Suid mount helpers fail to anticipate RLIMIT_FSIZE (http://openwall.com/lists/oss-security/2011/03/04/9)

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (http://openwall.com/lists/oss-security/2011/03/22/6)

[oss-security] 20110322 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (http://openwall.com/lists/oss-security/2011/03/22/4)

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (http://openwall.com/lists/oss-security/2011/03/05/7)

[oss-security] 20110307 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (http://openwall.com/lists/oss-security/2011/03/07/9)

http://www.mandriva.com/security/advisories?name=MDVSA-2011:178

[oss-security] 20110401 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (http://openwall.com/lists/oss-security/2011/04/01/2)

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (http://openwall.com/lists/oss-security/2011/03/04/10)

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (http://openwall.com/lists/oss-security/2011/03/14/16)

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (http://openwall.com/lists/oss-security/2011/03/31/4)

[oss-security] 20110304 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (http://openwall.com/lists/oss-security/2011/03/04/12)

http://www.mandriva.com/security/advisories?name=MDVSA-2011:179

[oss-security] 20110314 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (http://openwall.com/lists/oss-security/2011/03/14/7)

[oss-security] 20110303 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (http://openwall.com/lists/oss-security/2011/03/04/11)

[oss-security] 20110305 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (http://openwall.com/lists/oss-security/2011/03/05/3)

http://www.redhat.com/support/errata/RHSA-2011-1526.html

[oss-security] 20110331 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (http://openwall.com/lists/oss-security/2011/03/31/3)

[oss-security] 20110315 Re: Suid mount helpers fail to anticipate RLIMIT_FSIZE (http://openwall.com/lists/oss-security/2011/03/15/6)

Miscellaneous

http://sourceware.org/bugzilla/show_bug.cgi?id=12625

https://bugzilla.redhat.com/show_bug.cgi?id=688980

Rapid7

Technical Analysis