Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-2657

Опубликовано: 04 авг. 2009
Источник: nvd
CVSS2: 4.6
EPSS Низкий

Описание

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:nilf:nilfs:*:*:*:*:*:*:*:*
Версия до 2.0.13 (включая)
cpe:2.3:a:nilf:nilfs:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.8:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.9:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.10:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.11:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.12:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.13:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.14:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.15:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.16:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.17:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:1.0.18:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:2.0.7:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:2.0.9:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:2.0.10:*:*:*:*:*:*:*
cpe:2.3:a:nilf:nilfs:2.0.12:*:*:*:*:*:*:*

EPSS

Процентиль: 17%
0.00053
Низкий

4.6 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu
больше 16 лет назад

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2.

debian
больше 16 лет назад

nilfs-utils before 2.0.14 installs multiple programs with unnecessary ...

github
больше 3 лет назад

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2.

EPSS

Процентиль: 17%
0.00053
Низкий

4.6 Medium

CVSS2

Дефекты

CWE-264