CVEvulnerability
CVE-2013-4362
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-09-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
WEB-DAV Linux File System (davfs2) 1.4.6 and 1.4.7 allow local users to gain privileges via unknown attack vectors in (1) kernel_interface.c and (2) mount_davfs.c, related to the "system" function.
Affected configurations
• werner baumann davfs2 1.4.6
• werner baumann davfs2 1.4.7
Related
Weakness · not in database (1)
References
- http://osvdb.org/97416 osvdb.org
- http://osvdb.org/97417 osvdb.org
- http://savannah.nongnu.org/bugs/?40034 Patch
- http://seclists.org/oss-sec/2013/q3/627 Patch
- http://www.debian.org/security/2013/dsa-2765 www.debian.org
- http://www.securityfocus.com/bid/62445 www.securityfocus.com
- https://security.gentoo.org/glsa/201612-02 security.gentoo.org
- http://osvdb.org/97416 osvdb.org
- http://osvdb.org/97417 osvdb.org
- http://savannah.nongnu.org/bugs/?40034 Patch
- http://seclists.org/oss-sec/2013/q3/627 Patch
- http://www.debian.org/security/2013/dsa-2765 www.debian.org
- http://www.securityfocus.com/bid/62445 www.securityfocus.com
- https://security.gentoo.org/glsa/201612-02 security.gentoo.org