Detections
Analytics
MiracleLinux 3 : autofs-5.0.1-0.rc2.177.0.1.AXS3 (AXSA:2013-77:01)
critical Nessus Plugin ID 289755
Language:
Synopsis
The remote MiracleLinux host is missing a security update.Description
The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2013-77:01 advisory.autofs is a daemon which automatically mounts filesystems when you use them, and unmounts them later when you are not using them. This can include network filesystems, CD-ROMs, floppies, and so forth.
Security issues fixed with this release:
CVE-2012-2697 Not available at the time of writing, please refer to the link below.
Fixed bugs:
With slow servers or with many active mounts, the autofs init script could sometimes time out waiting for the automount daemon to exit and would report a shutdown failure. This has been fixed by increasing the amount of time the init scritpt waits for the daemon.
Previously, autofs would try to download the entire LDAP map at startup. This has been fixed.
Fixed a faulty logic test that caused automout to report false positive failures when checking the validity of a mount location.
Automount sometimes used excessive CPU resources when trying to access invalid or non-existent keys. This has been fixed.
Update the auto.master(5) man page with the -t, --timeout option in the FORMAT options section.
Enhancement:
It is now possible to to configure separate timeout values for individual direct map entries in the autofs master map.
Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Update the affected autofs package.See Also
Plugin Details
Severity: Critical
ID: 289755
File Name: miracle_linux_AXSA-2013-77.nasl
Version: 1.1
Type: local
Published: 1/16/2026
Updated: 1/16/2026
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.5
Vendor
Vendor Severity: High
CVSS v2
Risk Factor: Medium
Base Score: 4.9
Temporal Score: 3.6
Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C
CVSS Score Source: CVE-2012-2697
CVSS v3
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:miracle:linux:3, p-cpe:/a:miracle:linux:autofs
Required KB Items: Host/local_checks_enabled, Host/MiracleLinux/release, Host/MiracleLinux/rpm-list, Host/cpu
Exploit Ease: No known exploits are available
Patch Publication Date: 2/17/2013
Vulnerability Publication Date: 1/8/2013
Reference Information
CVE: CVE-2012-2697