CVE-2009-0115

The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES)…

published March 30, 2009

CVSS
—
EPSS
0%
Percentile
41.5
In the wild
Unconfirmed
What it is

The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly other operating systems, uses world-writable permissions for the socket file (aka /var/run/multipathd.sock), which allows local users to send arbitrary commands to the multipath daemon.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00494 · 41.5th percentile
Published
2009-03-30T16:00Z
EPSS history
Timeline
  • 30 MAR 16:00Z
    The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES)…
    cvelistv5