NetSight
IP …
high7.8

CVE-2009-0115

The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fe…

Impact

The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly other operating systems, uses world-writable permissions for the socket file (aka /var/run/multipathd.sock), which allows local users to send arbitrary commands to the multipath daemon.

Affected products

VendorProductAffected versions
Christophe.VaroquiMultipath-Tools
Version 0.4.8
FedoraprojectFedora
Versions 9, 10
DebianDebian Linux
Versions 4.0, 5.0
AvayaIntuity Audix Lx
Version 2.0
AvayaMessage Networking
Version 3.1
AvayaMessaging Storage Server
Versions 3.0, 4.0, 5.0
NovellOpen Enterprise Server
All versions
OpensuseOpensuse
from 10.3 through 11.0
SuseLinux Enterprise Desktop
Version 9
SuseLinux Enterprise Server
Versions 9, 10
JuniperCtpview
before 7.1
Version 7.1

Weakness classification

CWE-732

References