CVE-2009-4411

The (1) setfacl and (2) getfacl commands in XFS acl 2.2.47, when running in recursive (-R) mode, follow symbolic links even when the --physical (aka -P) or -L…

published December 24, 2009

CVSS
—
EPSS
0%
Percentile
24.7
In the wild
Unconfirmed
What it is

The (1) setfacl and (2) getfacl commands in XFS acl 2.2.47, when running in recursive (-R) mode, follow symbolic links even when the --physical (aka -P) or -L option is specified, which might allow local users to modify the ACL for arbitrary files or directories via a symlink attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00329 · 24.7th percentile
Published
2009-12-24T16:00Z
EPSS history
Timeline
  • 24 DEC 16:00Z
    The (1) setfacl and (2) getfacl commands in XFS acl 2.2.47, when running in recursive (-R) mode, follow symbolic links even when the --physical (aka -P) or -L…
    cvelistv5