medium5.5
CVE-2014-2079
X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use direct…
Impact
X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| X File Explorer Project | X File Explorer | Version 1.32.5 |
| Debian | Debian Linux | Versions 7.0, 8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2014/02/24/5
- http://www.securityfocus.com/bid/65748
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739536
- https://bugzilla.redhat.com/show_bug.cgi?id=1069066
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91519
- http://www.openwall.com/lists/oss-security/2014/02/24/5
- http://www.securityfocus.com/bid/65748
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739536
- https://bugzilla.redhat.com/show_bug.cgi?id=1069066
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91519