Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-2905
HistoryMay 02, 2014 - 2:55 p.m.

CVE-2014-2905

2014-05-0214:55:07
CWE-264
[email protected]
web.nvd.nist.gov
7

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

9.1

Confidence

High

EPSS

0

Percentile

5.1%

JSON

fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable socket, related to /tmp/fishd.socket.user permissions.

Affected configurations

Nvd
Node
fishshellfishMatch1.16.0
OR
fishshellfishMatch2.0.0
VendorProductVersionCPE
fishshellfish1.16.0cpe:2.3:a:fishshell:fish:1.16.0:*:*:*:*:*:*:*
fishshellfish2.0.0cpe:2.3:a:fishshell:fish:2.0.0:*:*:*:*:*:*:*

Related

ubuntucve 1
prion 1
debiancve 1
cve 1
cvelist 1
fedora 4
openvas 10
nessus 8
mageia 1
gentoo 1
freebsd 1
suse 2
osv 1
ubuntucve
ubuntucve
CVE-2014-2905
2014-05-02 00:00:00
prion
prion
Design/Logic Flaw
2014-05-02 14:55:00
debiancve
debiancve
CVE-2014-2905
2014-05-02 14:55:07
cve
cve
CVE-2014-2905
2014-05-02 14:55:07
cvelist
cvelist
CVE-2014-2905
2014-05-02 14:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: fish-2.1.0-11.fc20
2014-08-23 01:59:55
[SECURITY] Fedora 19 Update: fish-2.1.0-11.fc19
2014-08-23 01:54:14
[SECURITY] Fedora 20 Update: fish-2.1.0-9.fc20
2014-05-06 03:36:35
openvas
openvas
Fedora Update for fish FEDORA-2014-9402
2014-08-23 00:00:00
Fedora Update for fish FEDORA-2014-9407
2014-08-23 00:00:00
Fedora Update for fish FEDORA-2014-5794
2014-05-12 00:00:00
nessus
nessus
Fedora 19 : fish-2.1.0-11.fc19 (2014-9402)
2014-08-23 00:00:00
Fedora 20 : fish-2.1.0-11.fc20 (2014-9407)
2014-08-23 00:00:00
Fedora 20 : fish-2.1.0-9.fc20 (2014-5794)
2014-05-06 00:00:00
mageia
mageia
Updated fish package fixes multiple security vulnerabilities
2014-10-09 18:06:16
gentoo
gentoo
fish: Multiple vulnerabilities
2014-12-28 00:00:00
freebsd
freebsd
fish -- local privilege escalation and remote code execution
2014-09-28 00:00:00
suse
suse
Security update for fish3 (moderate)
2019-09-25 00:00:00
Security update for fish3 (moderate)
2019-09-24 00:00:00
osv
osv
fish-2.4.0-1.1 on GA media
2024-06-15 00:00:00

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

9.1

Confidence

High

EPSS

0

Percentile

5.1%

JSON
Related for NVD:CVE-2014-2905
ubuntucve1prion1debiancve1cve1cvelist1fedora4openvas10nessus8mageia1gentoo1freebsd1suse2osv1