CVE-2009-0115

moderate-risk
Published 2009-03-30

The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly other operating systems, uses world-writable permissions for the socket file (aka /var/run/multipathd.sock), which allows local users to send arbitrary commands to the multipath daemon.

Do I need to act?

-
0.08% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.8/10 High
LOCAL / LOW complexity

Affected Products (19)

Intuity Audix Lx
Intuity Audix Lx
Ctpview
Ctpview
Multipath-Tools
Intuity Audix Lx
Message Networking
Messaging Storage Server
Messaging Storage Server
Messaging Storage Server

Affected Vendors

Opensuse Debian Fedoraproject Novell Avaya Juniper Suse Christophe.Varoqui

References (38)

Broken Link http://download.opensuse.org/update/10.3-test/repodata/patch-kpartx-6082.xml
Third Party Advisory http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691
Third Party Advisory http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
Third Party Advisory http://launchpad.net/bugs/cve/2009-0115
Mailing List http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
Broken Link http://lists.vmware.com/pipermail/security-announce/2010/000082.html
Broken Link http://secunia.com/advisories/34418
Broken Link http://secunia.com/advisories/34642
Broken Link http://secunia.com/advisories/34694
Broken Link http://secunia.com/advisories/34710
Broken Link http://secunia.com/advisories/34759
Broken Link http://secunia.com/advisories/38794
Third Party Advisory http://support.avaya.com/elmodocs2/security/ASA-2009-128.htm
Third Party Advisory http://www.debian.org/security/2009/dsa-1767
Permissions Required http://www.vupen.com/english/advisories/2010/0528
Broken Link https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...
Mailing List https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00231.html
Mailing List https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00236.html
Broken Link http://download.opensuse.org/update/10.3-test/repodata/patch-kpartx-6082.xml
and 18 more references
43
/ 100
moderate-risk
Severity 24/34 · High
Exploitability 0/34 · Minimal
Exposure 19/34 · Moderate