Advanced

Mandriva: 2013:244: davfs2

Posted by Ridcully on · Post a comment
LinuxSecurity.com; By Benjamin D. Thomas 		Mail this story
Print this story

A vulnerability has been discovered and corrected in davfs2: Davfs2, a filesystem client for WebDAV, calls the function system() insecurely while is setuid root. This might allow a privilege escalation (CVE-2013-4362). The updated packages have been patched to correct this issue.

Full Story

  Nav
» Read more about: Story Type: Announcements, Security; Groups: Developer, Mandriva

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

Comments

No comments yet. Be the first.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post