Unrated severityNVD Advisory· Published Sep 11, 2008· Updated Jun 16, 2026
CVE-2008-3970
CVE-2008-3970
Description
pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting a user-defined volume, which allows local users to bypass intended access restrictions via a local mount.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
28cpe:2.3:a:pam_mount:pam_mount:0.10:*:*:*:*:*:*:*+ 27 more
- cpe:2.3:a:pam_mount:pam_mount:0.10:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.11:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.12.2:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.13:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.15:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.16:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.17:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.18:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.19:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.20:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.21:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.26:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.27:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.28:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.29:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.31:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.32:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.35:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.35.1:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.37:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.38:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.39:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.40:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.41:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.43:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.44:*:*:*:*:*:*:*
- cpe:2.3:a:pam_mount:pam_mount:0.45:*:*:*:*:*:*:*
- (no CPE)range: 0.10 - 0.45
Patches
Vulnerability mechanics
References
9- dev.medozas.de/gitweb.cginvd
- lists.opensuse.org/opensuse-security-announce/2008-09/msg00005.htmlnvd
- sourceforge.net/mailarchive/forum.phpnvd
- sourceforge.net/project/shownotes.phpnvd
- www.mandriva.com/security/advisoriesnvd
- www.openwall.com/lists/oss-security/2008/09/06/3nvd
- www.openwall.com/lists/oss-security/2008/09/09/12nvd
- www.securityfocus.com/bid/31041nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/44960nvd
News mentions
0No linked articles in our index yet.