(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - util-linux: mount folder existence information disclosure (CVE-2013-0157)

  - util-linux: Extended partition loop in MBR partition table leads to DOS (CVE-2016-5011)

  - Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a     denial of service (crash) via a crafted file, related to the page global variable. (CVE-2015-5218)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - util-linux: umount may fail to remove /etc/mtab~ lock file (CVE-2011-1677)

  - mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking     whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab     file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089. (CVE-2011-1675)

  - (a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to     determine the existence of restricted directories by (1) using the --guess-fstype command-line option or     (2) attempting to mount a non-existent device, which generates different error messages depending on     whether the directory exists. (CVE-2013-0157)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote host is affected by the vulnerability described in GLSA-201405-15 (util-linux: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in util-linux. Please       review the CVE identifiers referenced below for details.
  Impact :

    A local attacker may be able to cause a Denial of Service condition,       trigger corruption of /etc/mtab, obtain sensitive information, or have       other unspecified impact.
  Workaround :

    There is no known workaround at this time.

From Red Hat Security Advisory 2013:0517 :

Updated util-linux-ng packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The util-linux-ng packages contain a large variety of low-level system utilities that are necessary for a Linux operating system to function.

An information disclosure flaw was found in the way the mount command reported errors. A local attacker could use this flaw to determine the existence of files and directories they do not have access to.
(CVE-2013-0157)

These updated util-linux-ng packages include numerous bug fixes and enhancements. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Enterprise Linux 6.4 Technical Notes, linked to in the References, for information on the most significant of these changes.

All users of util-linux-ng are advised to upgrade to these updated packages, which contain backported patches to correct these issues and add these enhancements.

A vulnerability has been found and corrected in util-linux :

An information disclosure flaw was found in the way the mount command reported errors. A local attacker could use this flaw to determine the existence of files and directories they do not have access to (CVE-2013-0157).

Additionally for Mandriva Enterprise Server 5 a patch was added to support a new --no-canonicalize switch for mount to support the fix for CVE-2010-3879 in fuse.

The updated packages have been patched to correct these issues.

Updated util-linux-ng packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The util-linux-ng packages contain a large variety of low-level system utilities that are necessary for a Linux operating system to function.

An information disclosure flaw was found in the way the mount command reported errors. A local attacker could use this flaw to determine the existence of files and directories they do not have access to.
(CVE-2013-0157)

These updated util-linux-ng packages include numerous bug fixes and enhancements. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Enterprise Linux 6.4 Technical Notes, linked to in the References, for information on the most significant of these changes.

All users of util-linux-ng are advised to upgrade to these updated packages, which contain backported patches to correct these issues and add these enhancements.

An information disclosure flaw was found in the way the mount command reported errors. A local attacker could use this flaw to determine the existence of files and directories they do not have access to.
(CVE-2013-0157)

ID	Name	Product	Family	Severity
198622	RHEL 5 : util-linux (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
198606	RHEL 4 : util-linux (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
74058	GLSA-201405-15 : util-linux: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
68754	Oracle Linux 6 : util-linux-ng (ELSA-2013-0517)	Nessus	Oracle Linux Local Security Checks	low
66265	Mandriva Linux Security Advisory : util-linux (MDVSA-2013:154)	Nessus	Mandriva Local Security Checks	low
65149	CentOS 6 : util-linux-ng (CESA-2013:0517)	Nessus	CentOS Local Security Checks	low
65017	Scientific Linux Security Update : util-linux-ng on SL6.x i386/x86_64 (20130221)	Nessus	Scientific Linux Local Security Checks	low
64765	RHEL 6 : util-linux-ng (RHSA-2013:0517)	Nessus	Red Hat Local Security Checks	low

Detections

Analytics

CVE-2013-0157

low

Tenable Plugins

medium

critical

medium

low

low

low

low

low