CVE-2014-1421

Published: 18 November 2014

mountall 1.54, as used in Ubuntu 14.10, does not properly handle the umask when using the mount utility, which allows local users to bypass intended access restrictions via unspecified vectors.

Notes

This is only an issue when combined with the mount utility in
utopic and newer.

Status

References

• https://ubuntu.com/security/notices/USN-2411-1
• https://www.cve.org/CVERecord?id=CVE-2014-1421
• NVD
• Launchpad
• Debian

Bugs

• https://bugs.launchpad.net/ubuntu/+source/partman-efi/+bug/1390183