{"id":"CVE-2014-2079","aliases":["DEBIAN-CVE-2014-2079","EUVD-2014-2119","GHSA-rgg2-xp4r-28h4"],"status":"published","title":"X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain...","description":"X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.004,"percentile":0.34459,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2018-07-16T14:00:00Z","modified":"2026-10-23T16:00:21Z","fixes":[{"ecosystem":"Debian:12","package":"xfe","fixed_in":["1.37-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xfe","fixed_in":["1.37-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xfe","fixed_in":["1.37-2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"xfe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xfe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xfe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37-2"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"x_file_explorer_project","product":"x_file_explorer"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1069066","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739536","tags":["x_refsource_CONFIRM","x_transferred","Mailing List","Patch","Third Party Advisory","advisory","article","fix"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/91519","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/02/24/5","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.securityfocus.com/bid/65748","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-2079"},{"url":"https://github.com/advisories/GHSA-rgg2-xp4r-28h4"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-2079","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-2079","description":"X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares.","status":"published","published":"2018-07-16T14:00:00Z","modified":"2024-08-06T09:58:16.263Z","updated_at":"2026-11-02T14:33:43.883586Z"}],"euvd":[{"id":"EUVD-2014-2119","description":"X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares.","status":"published","published":"2018-07-16T14:00:00Z","modified":"2024-08-06T09:58:16Z","updated_at":"2026-11-03T01:57:15.701553Z"}],"ghsa":[{"id":"GHSA-rgg2-xp4r-28h4","title":"X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain...","description":"X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares.","status":"published","published":"2022-05-14T02:59:33Z","modified":"2023-02-02T05:06:44Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:52:21.60349Z"}],"nvd":[{"id":"CVE-2014-2079","description":"X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares.","status":"published","published":"2018-07-16T14:29:00.327Z","modified":"2026-06-17T00:06:02.337Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:59.001778Z"}],"osv":[{"id":"CVE-2014-2079","description":"X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares.","status":"published","published":"2018-07-16T14:29:00Z","modified":"2026-04-10T03:43:39.145141Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2014-2079","description":"X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares.","status":"published","published":"2018-07-16T14:29:00.327Z","modified":"2026-10-23T16:00:21.262521989Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:26.134753Z"}]}}