nilfs-utils Multiple Local Privilege Escalation Vulnerabilities

Bugtraq ID:	35796
Class:	Design Error
CVE:	CVE-2009-2657
Remote:	No
Local:	Yes
Published:	Jul 24 2009 12:00AM
Updated:	Aug 21 2009 03:56PM
Credit:	Eric Sandeen
Vulnerable:	Nippon Telegraph and Telephone Corporation (NTT) nilfs-utils 2.0.13
Not Vulnerable:	Nippon Telegraph and Telephone Corporation (NTT) nilfs-utils 2.0.14

nilfs-utils Multiple Local Privilege Escalation Vulnerabilities

The 'nilfs-utils' Linux application is prone to multiple local privilege-escalation vulnerabilities.

Local attackers may exploit these issues to gain elevated privileges, which may lead to a complete compromise of an affected computer.

Versions prior to 'nilfs-utils' 2.0.14 are vulnerable.

nilfs-utils Multiple Local Privilege Escalation Vulnerabilities

Attackers require local, interactive access to a vulnerable computer to exploit these issues.

nilfs-utils Multiple Local Privilege Escalation Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Nippon Telegraph and Telephone Corporation (NTT) nilfs-utils 2.0.13

• Nippon Telegraph and Telephone Corporation (NTT) nilfs-utils-2.0.14.tar.bz2
  http://www.nilfs.org/download/nilfs-utils-2.0.14.tar.bz2

nilfs-utils Multiple Local Privilege Escalation Vulnerabilities

References:

• Bug 505374 Review Request: nilfs-utils - Utilities for managing NILFS v2 filesys (Eric Sandeen)
  
• NILFS Homepage (NTT)
  
• nilfs-utils privilege escalation (Tomas Hoger)
  
• nilfs-utils-2.0.14 Mon Jul 20, 2009 JST (NTT)