CVE-2010-2192

LOW 1.9CVE-2010-2192 · Published 18/06/2010 · updated 16/06/2026

In short

CVE-2010-2192 is a LOW (CVSS 1.9) vulnerability affecting pmount (vincent fourmond).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pmount vincent_fourmond	`= 0.9.18`	No fix yet

Description

The make_lockdir_name function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/.

References

security.debian.org/pool/updates/main/p/pmount/pmount_0.9.18-2+lenny1.diff.gz
debian.org/security/2010/dsa-2063 · Patch
securityfocus.com/bid/40939
vupen.com/english/advisories/2010/1520

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free