CVE-2009-0115: High severity Christophe.varoqui Multipath-tools vulnerability
The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly other operating systems, uses world-writable permissions for the socket file (aka /var/run/multipathd.sock), which allows local users to send arbitrary commands to the multipath daemon.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0115?
CVE-2009-0115 has a high severity rating due to its exploitation potential allowing unauthorized access through world-writable socket permissions.
How do I fix CVE-2009-0115?
To resolve CVE-2009-0115, change the permissions of the socket file '/var/run/multipathd.sock' to restrict access to only authorized users.
What systems are affected by CVE-2009-0115?
CVE-2009-0115 affects systems running multipath-tools version 0.4.8, including various SUSE, Fedora, and Debian distributions.
What are the potential risks associated with CVE-2009-0115?
Exploitation of CVE-2009-0115 can lead to unauthorized access to system resources, manipulation of multipath configurations, or denial of service.
Is there a patch available for CVE-2009-0115?
Yes, patches for CVE-2009-0115 are available from the respective Linux distribution maintainers to rectify the vulnerability.