Permissions, Privileges, and Access Controls in davfs2 - CVE-2013-4362

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU42514

Permissions, Privileges, and Access Controls in davfs2 - CVE-2013-4362

Published: October 1, 2013 / Updated: September 11, 2020


Vulnerability identifier: #VU42514
CSH Severity: High
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber
CVE-ID: CVE-2013-4362
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability: Public exploit is available
Vendor: savannah.nongnu.org
Affected software:
davfs2

Detailed vulnerability description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

WEB-DAV Linux File System (davfs2) 1.4.6 and 1.4.7 allow local users to gain privileges via unknown attack vectors in (1) kernel_interface.c and (2) mount_davfs.c, related to the "system" function.


How to mitigate CVE-2013-4362

Install update from vendor's website.

Sources