CVE-2009-2657

EUVD-2009-2651
nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.6 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
Affected Products (NVD)
VendorProductVersion
nilfnilfs
𝑥
≤ 2.0.13
nilfnilfs
1.0.0
nilfnilfs
1.0.1
nilfnilfs
1.0.2
nilfnilfs
1.0.3
nilfnilfs
1.0.4
nilfnilfs
1.0.5
nilfnilfs
1.0.6
nilfnilfs
1.0.7
nilfnilfs
1.0.8
nilfnilfs
1.0.9
nilfnilfs
1.0.10
nilfnilfs
1.0.11
nilfnilfs
1.0.12
nilfnilfs
1.0.13
nilfnilfs
1.0.14
nilfnilfs
1.0.15
nilfnilfs
1.0.16
nilfnilfs
1.0.17
nilfnilfs
1.0.18
nilfnilfs
2.0.0
nilfnilfs
2.0.1
nilfnilfs
2.0.2
nilfnilfs
2.0.4
nilfnilfs
2.0.5
nilfnilfs
2.0.6
nilfnilfs
2.0.7
nilfnilfs
2.0.9
nilfnilfs
2.0.10
nilfnilfs
2.0.12
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
nilfs2-tools
dapper
dne
hardy
dne
intrepid
ignored
jaunty
ignored
karmic
ignored
lucid
dne
maverick
dne
natty
dne
Common Weakness Enumeration