Vulnerability in Nilf Nilfs

CVE-2009-2657

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2.

EPSS: 0.005 (42.6th percentile) — read the EPSS interpretation.

Affected products

  • Nilf Nilfs — versions 1.0.0, 1.0.1, 1.0.2
  • N/a — versions n/a

Weakness classification (CWE)

References