Vulnerability in Rocks Clusters

CVE-2006-3693

Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (\`) in an argument to the (1) mount-loop (mount-loop.c) or (2) umount-loop (umount-loop.c) command, which is not filtered in a system function call.

EPSS: 0.009 (57.1th percentile) — read the EPSS interpretation.

Affected products

References