CVE-2014-2905

fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable…

published May 2, 2014

CVSS
—
EPSS
0%
Percentile
27.3
In the wild
Unconfirmed
What it is

fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable socket, related to /tmp/fishd.socket.user permissions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.3th percentile
Published
2014-05-02T14:00Z
EPSS history
Timeline
  • 02 MAY 14:00Z
    fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable…
    cvelistv5