Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (`) in an argument to the (1) mount-loop (mount-loop.c) or (2) umount-loop (umount-loop.c) command, which is not filtered in a system function call.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rocks_clusters | Rocks_clusters | * | 4.1 (including) |