CVE-2009-2657

Published: Aug 4, 2009

Modified: Sep 17, 2024

PUBLISHED

Description

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=a5cb60e624e4863c8d6feaf2ea8791abb48d6f15

x_refsource_CONFIRM

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=5c95a57102e23e6982467cbe23e922450d3f38ed

x_refsource_CONFIRM

http://www.nilfs.org/git/?p=nilfs2-utils.git%3Ba=commitdiff%3Bh=d807e1c968c1f288486fb7d6f817434838fc12f7

x_refsource_CONFIRM

[oss-security] 20090724 nilfs-utils privilege escalation

mailing-list

x_refsource_MLIST

https://bugzilla.redhat.com/show_bug.cgi?id=505374

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2009-2657

Description

Affected Products

References