high7.0
CVE-2014-3856
The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a te…
Impact
The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a temporary file with a predictable name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fishshell | Fish | from 1.23.0 before 2.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/fish-shell/fish-shell/issues/1437
- https://github.com/fish-shell/fish-shell/releases/tag/2.1.1
- https://www.openwall.com/lists/oss-security/2014/04/28/4
- https://github.com/fish-shell/fish-shell/issues/1437
- https://github.com/fish-shell/fish-shell/releases/tag/2.1.1
- https://www.openwall.com/lists/oss-security/2014/04/28/4