CVE-2009-2657

N/A

Descricao

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado8/4/2009

Ultima modificacao4/23/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

nilf:nilfs

Fraquezas (CWE)

CWE-264

Referencias

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=5c95a57102e23e6982467cbe23e922450d3f38ed(cve@mitre.org)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=a5cb60e624e4863c8d6feaf2ea8791abb48d6f15(cve@mitre.org)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=d807e1c968c1f288486fb7d6f817434838fc12f7(cve@mitre.org)

http://www.openwall.com/lists/oss-security/2009/07/24/4(cve@mitre.org)

https://bugzilla.redhat.com/show_bug.cgi?id=505374(cve@mitre.org)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=5c95a57102e23e6982467cbe23e922450d3f38ed(af854a3a-2127-422b-91ae-364da2661108)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=a5cb60e624e4863c8d6feaf2ea8791abb48d6f15(af854a3a-2127-422b-91ae-364da2661108)

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=d807e1c968c1f288486fb7d6f817434838fc12f7(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2009/07/24/4(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=505374(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.