CVE-2014-1845
First published: Wed Jan 29 2014(Updated: )
An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Enlightenment Terminology | <0.17.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openwall.com/lists/oss-security/2014/02/03/19
- https://bugzilla.redhat.com/show_bug.cgi?id=1059410
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91216
- https://git.enlightenment.org/core/enlightenment.git/commit/?id=666df815cd86a50343859bce36c5cf968c5f38b0
- https://git.enlightenment.org/core/enlightenment.git/commit/?id=bb4a21e98656fe2c7d98ba2163e6defe9a630e2b
- https://git.enlightenment.org/core/enlightenment.git/commit/?id=9456e88504cb5daddbac3f49373a3a9a8577e27a
- https://access.redhat.com/security/cve/CVE-2014-1845
- https://access.redhat.com/security/cve/CVE-2014-1846
- http://openwall.com/lists/oss-security/2014/02/03/19
Frequently Asked Questions
What is the severity of CVE-2014-1845?
CVE-2014-1845 is classified as a local privilege escalation vulnerability.
How do I fix CVE-2014-1845?
To fix CVE-2014-1845, update the Enlightenment software to version 0.17.6 or later.
Who is affected by CVE-2014-1845?
CVE-2014-1845 affects local users of the Enlightenment desktop environment prior to version 0.17.6.
Can CVE-2014-1845 be exploited remotely?
CVE-2014-1845 cannot be exploited remotely as it requires local access to the system.
What components of Enlightenment are affected by CVE-2014-1845?
CVE-2014-1845 affects the setuid root helper component of the Enlightenment desktop environment.
- agent/remedy
- agent/first-publish-date
- agent/type
- collector/mitre-cve
- source/MITRE
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2014-1845
- agent/author
- agent/weakness
- agent/references
- agent/severity
- agent/last-modified-date
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- vendor/enlightenment
- canonical/enlightenment terminology