medium4.6
CVE-2014-3980
libfep 0.0.5 before 0.1.0 does not properly use UNIX domain sockets in the abstract namespace, which allows local users to gain privileges via unspecified vect…
Impact
libfep 0.0.5 before 0.1.0 does not properly use UNIX domain sockets in the abstract namespace, which allows local users to gain privileges via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Daiki Ueno | Libfep | Versions 0.0.5, 0.0.6, 0.0.7, 0.0.8, 0.0.9 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2014/06/05/16
- http://www.openwall.com/lists/oss-security/2014/06/06/11
- http://www.securityfocus.com/bid/67903
- https://github.com/ueno/libfep/commit/293d9d3f
- http://www.openwall.com/lists/oss-security/2014/06/05/16
- http://www.openwall.com/lists/oss-security/2014/06/06/11
- http://www.securityfocus.com/bid/67903
- https://github.com/ueno/libfep/commit/293d9d3f