high7.2Public exploit code
CVE-2013-4362
WEB-DAV Linux File System (davfs2) 1.4.6 and 1.4.7 allow local users to gain privileges via unknown attack vectors in (1) kernel_interface.c and (2) mount_davf…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- davfs2 1.4.6/1.4.7 - Local Privilege Escalation2013-10-08 · local · linux · Verified
Impact
WEB-DAV Linux File System (davfs2) 1.4.6 and 1.4.7 allow local users to gain privileges via unknown attack vectors in (1) kernel_interface.c and (2) mount_davfs.c, related to the "system" function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Werner Baumann | Davfs2 | Versions 1.4.6, 1.4.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/97416
- http://osvdb.org/97417
- http://savannah.nongnu.org/bugs/?40034
- http://seclists.org/oss-sec/2013/q3/627
- http://www.debian.org/security/2013/dsa-2765
- http://www.securityfocus.com/bid/62445
- https://security.gentoo.org/glsa/201612-02
- http://osvdb.org/97416
- http://osvdb.org/97417
- http://savannah.nongnu.org/bugs/?40034
- http://seclists.org/oss-sec/2013/q3/627
- http://www.debian.org/security/2013/dsa-2765
- http://www.securityfocus.com/bid/62445
- https://security.gentoo.org/glsa/201612-02