CVE-2009-2657

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which...

4.6 Medium

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which allows local users to execute arbitrary commands via the device string in a -c command line option to mkfs.nilfs2.

Exploit likelihood

0.55%Down 0.4 points since Feb 4, 2022

What each source reports

NVD Score used 4.6

Record: CVE-2009-2657
CVSS 2.0: 4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

Record: CVE-2009-2657
Updated: 2026-11-02

EUVDEUVD-2009-2651 No score

Record: EUVD-2009-2651
Updated: 2026-11-03

GitHub AdvisoriesGHSA-pvm6-r47j-qphc No score

nilfs-utils before 2.0.14 installs multiple programs with unnecessary setuid privileges, which...

Record: GHSA-pvm6-r47j-qphc
Updated: 2026-11-02

Affected products

nilf nilfs

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-2657 is a medium vulnerability (CVSS 4.6) in Nilf Nilfs, published August 4, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.55%, the 46th percentile. No source names a fixed version.

References

Show 4 moreShow less