Every CVE Search/ Get API key

CVE-2010-2961

mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows...

6.9 MediumPublic exploit

mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain privileges by modifying this file.

Exploit likelihood

0.47%Down 1.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.9

mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain privileges by modifying this file.

Record
CVE-2010-2961
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-362
Updated
2026-11-02
CVE List No score

mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain privileges by modifying this file.

Record
CVE-2010-2961
Updated
2026-11-02
EUVDEUVD-2010-2965 No score

mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain privileges by modifying this file.

Record
EUVD-2010-2965
Updated
2026-11-03
GitHub AdvisoriesGHSA-8693-g75h-9wvm No score

mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows...

mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local users to gain privileges by modifying this file.

Record
GHSA-8693-g75h-9wvm
Weakness
CWE-362
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBmountall 2.15.2 (Ubuntu 10.04/10.10) - Local Privilege Escalation2010-09-21

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-2961 is a medium vulnerability (CVSS 6.9) in Scott James Remnant Mountall, published September 14, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 41st percentile. No source names a fixed version.

References

MoveEnter Open