CVE-2009-2657

N/A

Description

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2.

CVE Details

CVSS v3.1 ScoreN/A

Published8/4/2009

Last Modified4/23/2026

Sourcenvd

Honeypot Sightings0

Affected Products

nilf:nilfs

Weaknesses (CWE)

CWE-264

References

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=5c95a57102e23e6982467cbe23e922450d3f38ed(cve@mitre.org)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=a5cb60e624e4863c8d6feaf2ea8791abb48d6f15(cve@mitre.org)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=d807e1c968c1f288486fb7d6f817434838fc12f7(cve@mitre.org)

http://www.openwall.com/lists/oss-security/2009/07/24/4(cve@mitre.org)

https://bugzilla.redhat.com/show_bug.cgi?id=505374(cve@mitre.org)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=5c95a57102e23e6982467cbe23e922450d3f38ed(af854a3a-2127-422b-91ae-364da2661108)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=a5cb60e624e4863c8d6feaf2ea8791abb48d6f15(af854a3a-2127-422b-91ae-364da2661108)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=d807e1c968c1f288486fb7d6f817434838fc12f7(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2009/07/24/4(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=505374(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.