NVD

Id
47455  
Name
CVE-2009-0115  
Description
The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly other operating systems, uses world-writable permissions for the socket file (aka /var/run/multipathd.sock), which allows local users to send arbitrary commands to the multipath daemon.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-03-30  
Modified Date
2016-12-07  
Seq
2009-0115  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
237458 47455 CVE-2009-0115 http://download.opensuse.org/update/10.3-test/repodata/patch-kpartx-6082.xml  View
237459 47455 CVE-2009-0115 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691  View
237460 47455 CVE-2009-0115 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
237461 47455 CVE-2009-0115 http://launchpad.net/bugs/cve/2009-0115  View
237462 47455 CVE-2009-0115 SUSE-SR:2009:007  View
237463 47455 CVE-2009-0115 SUSE-SR:2009:008  View
237464 47455 CVE-2009-0115 [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates  View
237465 47455 CVE-2009-0115 oval:org.mitre.oval:def:9214  View
237466 47455 CVE-2009-0115 http://support.avaya.com/elmodocs2/security/ASA-2009-128.htm  View
237467 47455 CVE-2009-0115 DSA-1767  View
237468 47455 CVE-2009-0115 ADV-2010-0528  View
237469 47455 CVE-2009-0115 FEDORA-2009-3449  View
237470 47455 CVE-2009-0115 FEDORA-2009-3453  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40495 JVNDB-2009-001501 openSUSE および SUSE Linux Enterprise Server (SLES) の multipath-tools における任意のコマンドをマルチパスデーモンに送られる脆弱性 SUSE openSUSE および SUSE Linux Enterprise Server (SLES) の multipath-tools は、socket ファイル（別名 /var/run/multipathd.sock）のパーミッションに全ユーザからの読み取りを許可しているため、 任意のコマンドをマルチパスデーモンに送られる脆弱性が存在します。 CVE-2009-0115 37546 CVE-2009-0115 47455 6.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001501.html 2009-03-30 2009-06-30 View