Description
umount, when running with the Linux 2.6.15 kernel on Slackware Linux 10.2, allows local users to trigger a NULL dereference and application crash by invoking the program with a pathname for a USB pen drive that was mounted and then physically removed, which might allow the users to obtain sensitive information, including core file contents.
References
- 33652 vdb-entry
- MDKSA-2007:053 vendor-advisory
- 20070201 umount crash and xterm (kind of) information leak! mailing-list
- http://gotfault.wordpress.com/2007/01/18/umount-bug/
- 22850 vdb-entry
- 1017729 vdb-entry