CVE-2010-0296

Publication date 7 April 2010

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
eglibc 10.04 LTS lucid
Fixed 2.11.1-0ubuntu7.1
9.10 karmic
Fixed 2.10.1-0ubuntu17
9.04 jaunty Not in release
8.10 intrepid Not in release
8.04 LTS hardy Not in release
6.06 LTS dapper Not in release
glibc 10.04 LTS lucid Not in release
9.10 karmic Not in release
9.04 jaunty
Fixed 2.9-4ubuntu6.2
8.10 intrepid Ignored end of life, was needed
8.04 LTS hardy
Fixed 2.7-10ubuntu6
6.06 LTS dapper
Fixed 2.3.6-0ubuntu20.6

References

Related Ubuntu Security Notices (USN)

    • USN-944-1
    • GNU C Library vulnerabilities
    • 25 May 2010

Other references