PT-2015-4024 · Automount+3 · Automount+3

Published 2015-03-02 · Updated 2024-06-15 · CVE-2014-8169

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions automount version 5.0.8

Description The issue allows local users to gain privileges via a Trojan horse program in the user home directory. This occurs when a program map uses certain interpreted languages and the calling user's USER and HOME environment variable values are used instead of the values for the user used to run the mapped program.

Recommendations For automount version 5.0.8, consider restricting access to the program map that uses interpreted languages until a fix is available, and ensure that the USER and HOME environment variables are properly set for the user running the mapped program to prevent privilege escalation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CESA-2015_1344

CESA-2015_2417

CVE-2014-8169

OPENSUSE-SU-2024:10319-1

RHSA-2015:1344

RHSA-2015:2417

RHSA-2015_1344

RHSA-2015_2417

SUSE-SU-2015:1020-1

SUSE-SU-2015_1020-1

USN-2579-1

Affected Products

Centos

Red Hat

Suse

Automount

References · 43

• https://osv.dev/vulnerability/openSUSE-SU-2024:10319-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8169 · Security Note
• https://linux.oracle.com/errata/ELSA-2015-2417.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2015-1344.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2015-03/msg00033.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1344.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-8169 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-8169 · Security Note
• https://ubuntu.com/security/notices/USN-2579-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2014-8169 · Vendor Advisory
• http://ubuntu.com/usn/USN-2579-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-8169 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-8169 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-8169 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-8169 · Vendor Advisory