CVE-2010-2961: mountall.c in mountall before 2.15.2 uses 0666 permissions for the root.rules file, which allows local user...

Security readout for executives and security teams

This is a local privilege escalation issue in mountall. A file named root.rules was created with world-writable permissions, so a logged-in local user could modify it and potentially gain higher privileges. It is not described as a remote attack. Exposure is most likely on older Linux systems running mountall before 2.15.2, especially Ubuntu systems referenced by Launchpad and USN-985-1. The bundle does not identify full package ranges, supported releases, or CPEs. Treat this as important for legacy Linux estate hygiene. It is not a known remote emergency from the supplied evidence, but it can turn ordinary local access into elevated privileges on affected systems. Mitigation focus: Apply vendor updates for mountall, using Ubuntu USN-985-1 where applicable.; Move systems to mountall 2.15.2 or later where vendor packages support it.; Check vendor advisories for affected release-specific package versions..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.