[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250108

 
 

909

 
 

196064

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-2765-2 davfs2 -- privilege escalation

ID: oval:org.secpod.oval:def:601716Date: (C)2014-07-28   (M)2022-10-10
Class: PATCHFamily: unix




The update released for davfs2 in DSA 2765 had a version number for Debian 7 "wheezy" that sorts lower than the version in Debian 6 "squeeze", causing problems on upgrades. This update makes a package of davfs2 in wheezy available which corrects only the version number. For reference, the original advisory follows. Davfs2, a filesystem client for WebDAV, calls the function system insecurely while is setuid root. This might allow a privilege escalation.

Platform:
Debian 7.0
Product:
davfs2
Reference:
DSA-2765-2
CVE-2013-4362
CVE    1
CVE-2013-4362
CPE    4
cpe:/a:werner_baumann:davfs2
cpe:/o:debian:debian_linux:7.x
cpe:/a:werner_baumann:davfs2:1.4.6
cpe:/a:werner_baumann:davfs2:1.4.7
...

© SecPod Technologies