CVE-2010-0296

Priority
Description
The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or
libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not
properly handle newline characters in mountpoint names, which allows local
users to cause a denial of service (mtab corruption), or possibly modify
mount options and gain privileges, via a crafted mount request.
Assigned-to
kees
Package
Upstream:needed
Package
Source: glibc (LP Ubuntu Debian)
Upstream:needed
More Information

Updated: 2019-03-19 11:52:16 UTC (commit 15472795df7e9de45b82f2d36b8b419b939f97b2)