CVE-2006-3693: Rocks Clusters

Medium severity, CVSS 4.6. EPSS: 0.9% chance of exploitation in the next 30 days.

Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (\`) in an argument to the (1) mount-loop (mount-loop.c) or (2) umount-loop (umount-loop.c) command, which is not filtered in a system function call.

Affected products

• Rocks Clusters Rocks Clusters: up to and including 4.1

Published 2006-07-21. Last modified 2026-06-16.