CVE-2005-1774 WEB-DAV Linux File System (davfs2) 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a davfs2 mounted filesystem.
LowCVSS 2.1
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WEB-DAV Linux File System (davfs2) 0.2.3 does not properly enforce Unix permissions, which allows local users to write arbitrary files on a davfs2 mounted filesystem.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| davfs2 | = 0.2.3 | No fix listed |
| debian/davfs2(Debian:12) | < 0.2.4-1 | 0.2.4-1 |
| debian/davfs2(Debian:13) | < 0.2.4-1 | 0.2.4-1 |
| debian/davfs2(Debian:14) | < 0.2.4-1 | 0.2.4-1 |
References
- bugs.debian.org
- 20050525 davfs2 does not honour Unix permissions mailing-list
- 15497 third-party-advisory
- Debian Security Tracker CVE-2005-1774 vendor-advisory
- bugs.debian.org issue-tracking