Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2005-2876

umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags.

Security Impact Summary

CVE-2005-2876 is a security vulnerability that . Impacting 1 product from andries_brouwer organizations running these solutions should prioritize assessment and patching.

Historical Context

Originally identified in 2005, this vulnerability predates many modern security frameworks and practices. The vulnerability landscape of that era was characterized by different threat models and less mature defense mechanisms compared to contemporary standards.

Published

2005-09-13T23:03:00.000

Last Modified

2026-04-16T00:27:16.627

Status

Modified

Source

[email protected]

Severity

CVSSv2: 7.2 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application andries_brouwer util-linux 2.8.1_alpha Yes
Application andries_brouwer util-linux 2.8_12 Yes
Application andries_brouwer util-linux 2.9i Yes
Application andries_brouwer util-linux 2.9w Yes
Application andries_brouwer util-linux 2.10f Yes
Application andries_brouwer util-linux 2.10m Yes
Application andries_brouwer util-linux 2.10p Yes
Application andries_brouwer util-linux 2.11f Yes
Application andries_brouwer util-linux 2.11n Yes
Application andries_brouwer util-linux 2.11q Yes
Application andries_brouwer util-linux 2.11r Yes
Application andries_brouwer util-linux 2.11w Yes
Application andries_brouwer util-linux 2.11x Yes
Application andries_brouwer util-linux 2.11y Yes
Application andries_brouwer util-linux 2.11z Yes
Application andries_brouwer util-linux 2.12a Yes
Application andries_brouwer util-linux 2.12b Yes
Application andries_brouwer util-linux 2.12i Yes
Application andries_brouwer util-linux 2.12j Yes
Application andries_brouwer util-linux 2.12k Yes
Application andries_brouwer util-linux 2.12o Yes
Application andries_brouwer util-linux 2.12p Yes
Application andries_brouwer util-linux 2.12q Yes
Application andries_brouwer util-linux 2.13_pre1 Yes
Application andries_brouwer util-linux 2.13_pre2 Yes
References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For andries_brouwer's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.