CME-502
noexec on /tmp and /dev/shm
Description
Mounts /tmp and /dev/shm with noexec option, preventing execution of attacker-dropped binaries or scripts from temporary directories commonly used as staging areas.
CVSS Vector Impacts
| Metric | Transition | Rationale |
|---|---|---|
| Attack Complexity (AC) | L → H | Attacker cannot execute payloads from common writable directories |
CWE Relationships
Verification
Check mount options for /tmp and /dev/shm
$ mount | grep '/tmp' | grep noexec
# Expected: noexec
# Expected: noexec
Platform: linux
$ mount | grep '/dev/shm' | grep noexec
# Expected: noexec
# Expected: noexec
Platform: linux