CVE-2013-4362

WEB-DAV Linux File System (davfs2) 1.4.6 and 1.4.7 allow local users to gain privileges via unknown attack vectors in (1) kernel_interface.c and (2) mount_davfs.c, related to the "system" function.

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.17% chance of exploitation in the next 30 days, 67th percentile

Published

2013-09-30

Updated

2024-08-06

Proof-of-concept exploits (1)

• notclement/Automatic-davfs2-1.4.6-1.4.7-Local-Privilege-Escalation2★ · 2020-09-10

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/28806

Security advisories

• http://savannah.nongnu.org/bugs/?40034
• http://seclists.org/oss-sec/2013/q3/627
• http://www.securityfocus.com/bid/62445

References

• CVE Record
• NVD entry