CVE-2009-0115

Related Files

Gentoo Linux Security Advisory 201006-10

Posted Jun 3, 2010

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201006-10 - multipath-tools does not set correct permissions on the socket file, making it possible to send arbitrary commands to the multipath daemon for local users. multipath-tools uses world-writable permissions for the socket file (/var/run/multipathd.sock). Versions less than 0.4.8-r1 are affected.

tags | advisory, arbitrary, local

systems | linux, gentoo

advisories | CVE-2009-0115

SHA-256 | dc0a687d93a6023cf6ae31c5e7b458e40ff79f4cb9a7e66c6b7620869f08c65b

Download | Favorite | View

Debian Linux Security Advisory 1767-1

Posted Apr 9, 2009

Authored by Debian | Site debian.org

Debian Security Advisory 1767-1 - It was discovered that multipathd of multipath-tools, a tool-chain to manage disk multipath device maps, uses insecure permissions on its unix domain control socket which enables local attackers to issue commands to multipathd prevent access to storage devices or corrupt file system data.

tags | advisory, local

systems | linux, unix, debian

advisories | CVE-2009-0115

SHA-256 | 904b1a5f03572b81de80119e0824a09e315f6e1a9e7a568558324dbb6667828c

Download | Favorite | View