CVE-2009-2657

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.6 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
VendorProductVersion
nilfnilfs
𝑥
≤ 2.0.13
nilfnilfs
1.0.0
nilfnilfs
1.0.1
nilfnilfs
1.0.2
nilfnilfs
1.0.3
nilfnilfs
1.0.4
nilfnilfs
1.0.5
nilfnilfs
1.0.6
nilfnilfs
1.0.7
nilfnilfs
1.0.8
nilfnilfs
1.0.9
nilfnilfs
1.0.10
nilfnilfs
1.0.11
nilfnilfs
1.0.12
nilfnilfs
1.0.13
nilfnilfs
1.0.14
nilfnilfs
1.0.15
nilfnilfs
1.0.16
nilfnilfs
1.0.17
nilfnilfs
1.0.18
nilfnilfs
2.0.0
nilfnilfs
2.0.1
nilfnilfs
2.0.2
nilfnilfs
2.0.4
nilfnilfs
2.0.5
nilfnilfs
2.0.6
nilfnilfs
2.0.7
nilfnilfs
2.0.9
nilfnilfs
2.0.10
nilfnilfs
2.0.12
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
nilfs2-tools
natty
dne
maverick
dne
lucid
dne
karmic
ignored
jaunty
ignored
intrepid
ignored
hardy
dne
dapper
dne
Common Weakness Enumeration