(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2014-01-21 18:55
Updated : 2024-02-04 18:35
NVD link : CVE-2013-0157
Mitre link : CVE-2013-0157
CVE.ORG link : CVE-2013-0157
JSON object : View
Products Affected
kernel
- util-linux
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor