CVE-2009-2657

N/A

Description

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2.

Details CVE

Score CVSS v3.1N/A

Publie8/4/2009

Derniere modification4/23/2026

Sourcenvd

Observations honeypot0

Produits affectes

nilf:nilfs

Faiblesses (CWE)

CWE-264

References

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=5c95a57102e23e6982467cbe23e922450d3f38ed(cve@mitre.org)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=a5cb60e624e4863c8d6feaf2ea8791abb48d6f15(cve@mitre.org)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=d807e1c968c1f288486fb7d6f817434838fc12f7(cve@mitre.org)

http://www.openwall.com/lists/oss-security/2009/07/24/4(cve@mitre.org)

https://bugzilla.redhat.com/show_bug.cgi?id=505374(cve@mitre.org)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=5c95a57102e23e6982467cbe23e922450d3f38ed(af854a3a-2127-422b-91ae-364da2661108)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=a5cb60e624e4863c8d6feaf2ea8791abb48d6f15(af854a3a-2127-422b-91ae-364da2661108)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=d807e1c968c1f288486fb7d6f817434838fc12f7(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2009/07/24/4(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=505374(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.