CVE-2004-2610 mntd_mount.c in mntd before 0.4.2 might allow local users to gain privileges via shell metacharacters in a remount option in the configuration file.
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2004-2610?
CVE-2004-2610 is a medium-severity vulnerability in n/a, published on 4 Dec 2005.
Official description
mntd_mount.c in mntd before 0.4.2 might allow local users to gain privileges via shell metacharacters in a remount option in the configuration file. NOTE: It is not clear whether this is a vulnerability because there is not necessarily any common usage in which privilege boundaries are crossed. Typical usage would restrict write access to the configuration file.
Which versions are affected by CVE-2004-2610?
It affects 1 product.
Products include Stefan Bambach Mntd.
How do I fix CVE-2004-2610?
No fix has been published for CVE-2004-2610 yet. Limit exposure of the affected software until one is available.
Is CVE-2004-2610 being exploited?
There is no known exploitation of CVE-2004-2610 in the wild and no public exploit code.
Sources
Also known as GHSA-rwg3-w9r2-cx93.