CVE-2009-2657

Published: Aug 4, 2009Modified: Apr 23, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2.

Affected (30)

Products: Nilf: Nilfs

Nilf

1 product

Nilfs

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Nilf Nilfs	version ≤ 2.0.13
Nilf Nilfs	Version 1.0.0
Nilf Nilfs	Version 1.0.10
Nilf Nilfs	Version 1.0.11
Nilf Nilfs	Version 1.0.12
Nilf Nilfs	Version 1.0.13
Nilf Nilfs	Version 1.0.14
Nilf Nilfs	Version 1.0.15
Nilf Nilfs	Version 1.0.16
Nilf Nilfs	Version 1.0.17
Nilf Nilfs	Version 1.0.18
Nilf Nilfs	Version 1.0.1
Nilf Nilfs	Version 1.0.2
Nilf Nilfs	Version 1.0.3
Nilf Nilfs	Version 1.0.4
Nilf Nilfs	Version 1.0.5
Nilf Nilfs	Version 1.0.6
Nilf Nilfs	Version 1.0.7
Nilf Nilfs	Version 1.0.8
Nilf Nilfs	Version 1.0.9
Nilf Nilfs	Version 2.0.0
Nilf Nilfs	Version 2.0.10
Nilf Nilfs	Version 2.0.12
Nilf Nilfs	Version 2.0.1
Nilf Nilfs	Version 2.0.2
Nilf Nilfs	Version 2.0.4
Nilf Nilfs	Version 2.0.5
Nilf Nilfs	Version 2.0.6
Nilf Nilfs	Version 2.0.7
Nilf Nilfs	Version 2.0.9