CVE-2014-3980

2014-06-1114:55:09

CWE-264

redhat

web.nvd.nist.gov

cve-2014-3980

libfep

unix domain sockets

privilege escalation

security vulnerability

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

Percentile

5.1%

JSON

libfep 0.0.5 before 0.1.0 does not properly use UNIX domain sockets in the abstract namespace, which allows local users to gain privileges via unspecified vectors.

Affected configurations

Nvd

Node

daiki_uenolibfepMatch0.0.5

daiki_uenolibfepMatch0.0.6

daiki_uenolibfepMatch0.0.7

daiki_uenolibfepMatch0.0.8

daiki_uenolibfepMatch0.0.9

VendorProductVersionCPE
daiki_uenolibfep0.0.5cpe:2.3:a:daiki_ueno:libfep:0.0.5:*:*:*:*:*:*:*
daiki_uenolibfep0.0.6cpe:2.3:a:daiki_ueno:libfep:0.0.6:*:*:*:*:*:*:*
daiki_uenolibfep0.0.7cpe:2.3:a:daiki_ueno:libfep:0.0.7:*:*:*:*:*:*:*
daiki_uenolibfep0.0.8cpe:2.3:a:daiki_ueno:libfep:0.0.8:*:*:*:*:*:*:*
daiki_uenolibfep0.0.9cpe:2.3:a:daiki_ueno:libfep:0.0.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
daiki_ueno	libfep	0.0.5	cpe:2.3:a:daiki_ueno:libfep:0.0.5:::::::*
daiki_ueno	libfep	0.0.6	cpe:2.3:a:daiki_ueno:libfep:0.0.6:::::::*
daiki_ueno	libfep	0.0.7	cpe:2.3:a:daiki_ueno:libfep:0.0.7:::::::*
daiki_ueno	libfep	0.0.8	cpe:2.3:a:daiki_ueno:libfep:0.0.8:::::::*
daiki_ueno	libfep	0.0.9	cpe:2.3:a:daiki_ueno:libfep:0.0.9:::::::*