CVE-2008-2232

Description

The expand_template function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname.

Affected Platforms

Weakness Type

CWE-264

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490921
• http://secunia.com/advisories/31086
• http://secunia.com/advisories/31131
• http://secunia.com/advisories/36358
• http://www.debian.org/security/2008/dsa-1611
• http://www.securityfocus.com/bid/30245