Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.9
CVSSv2

CVE-2014-2905

Published: 02/05/2014 Updated: 24/09/2019
CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4
VMScore: 614
Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Subscribe to Fish

Vulnerability Summary

fish (aka fish-shell) 1.16.0 prior to 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable socket, related to /tmp/fishd.socket.user permissions.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

fishshell fish 1.16.0

fishshell fish 2.0.0

Vendor Advisories

Debian CVElist Bug Report Logs: fish: CVE-2014-2905 CVE-2014-2906 CVE-2014-2914 CVE-2014-3219 CVE-2014-3856
Debian Bug report logs - #746259 fish: CVE-2014-2905 CVE-2014-2906 CVE-2014-2914 CVE-2014-3219 CVE-2014-3856 Package: src:fish; Maintainer for src:fish is Tristan Seligmann <mithrandi@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 28 Apr 2014 15:09:01 UTC Severity: grave Tags: security, ...

References

CWE-264http://www.openwall.com/lists/oss-security/2014/04/28/4https://github.com/fish-shell/fish-shell/issues/1436http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00059.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-09/msg00071.htmlhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746259https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-35000CVE-2024-4439unauthorizedCVE-2024-0042CVE-2024-31848CVE-2023-40694cache poisoningCVE-2024-23707firmware
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook