CVE-2009-2657

N/A

Beschreibung

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht8/4/2009

Zuletzt geandert4/23/2026

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

nilf:nilfs

Schwachen (CWE)

CWE-264

Referenzen

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=5c95a57102e23e6982467cbe23e922450d3f38ed(cve@mitre.org)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=a5cb60e624e4863c8d6feaf2ea8791abb48d6f15(cve@mitre.org)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=d807e1c968c1f288486fb7d6f817434838fc12f7(cve@mitre.org)

http://www.openwall.com/lists/oss-security/2009/07/24/4(cve@mitre.org)

https://bugzilla.redhat.com/show_bug.cgi?id=505374(cve@mitre.org)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=5c95a57102e23e6982467cbe23e922450d3f38ed(af854a3a-2127-422b-91ae-364da2661108)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=a5cb60e624e4863c8d6feaf2ea8791abb48d6f15(af854a3a-2127-422b-91ae-364da2661108)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=d807e1c968c1f288486fb7d6f817434838fc12f7(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2009/07/24/4(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=505374(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.