1. Home
  2. CVE Database
  3. CVE-2014-1421
HIGH · 7.2

CVE-2014-1421

mountall 1.54, as used in Ubuntu 14.10, does not properly handle the umask when using the mount utility, which allows local users to bypass intended access restrictions via unspecified vectors.

Vulnerability Description

mountall 1.54, as used in Ubuntu 14.10, does not properly handle the umask when using the mount utility, which allows local users to bypass intended access restrictions via unspecified vectors.

CVSS Score

7.2

HIGH

AV:L/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
CanonicalUbuntu Linux14.10

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2014-1421?

CVE-2014-1421 is a vulnerability with a CVSS score of 7.2 (HIGH). mountall 1.54, as used in Ubuntu 14.10, does not properly handle the umask when using the mount utility, which allows local users to bypass intended access restrictions via unspecified vectors.

How severe is CVE-2014-1421?

CVE-2014-1421 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-1421?

Check the references section above for vendor advisories and patch information. Affected products include: Canonical Ubuntu Linux.