CVE-2013-4362

Published: Sep 30, 2013Modified: Apr 29, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

WEB-DAV Linux File System (davfs2) 1.4.6 and 1.4.7 allow local users to gain privileges via unknown attack vectors in (1) kernel_interface.c and (2) mount_davfs.c, related to the "system" function.

Affected (2)

Products: Werner Baumann: Davfs2

Werner Baumann

1 product

Davfs2

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Werner Baumann Davfs2	Version 1.4.6
Werner Baumann Davfs2	Version 1.4.7

Related CWEs

CWE-264

References (14)

http://osvdb.org/97416

Source: secalert@redhat.com

http://osvdb.org/97417

Source: secalert@redhat.com

http://savannah.nongnu.org/bugs/?40034

Source: secalert@redhat.com

Patch

http://seclists.org/oss-sec/2013/q3/627

Source: secalert@redhat.com

Patch

http://www.debian.org/security/2013/dsa-2765

Source: secalert@redhat.com

http://www.securityfocus.com/bid/62445

Source: secalert@redhat.com

https://security.gentoo.org/glsa/201612-02

Source: secalert@redhat.com

http://osvdb.org/97416