CVE-2014-8169
published 2015-03-18CVE-2014-8169: automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of the values…
PriorityP416medium4.4CVSS 2.0
AVLACMAuNCPIPAP
EPSS
0.34%
25.9th percentile
automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of the values for the user used to run the mapped program, which allows local users to gain privileges via a Trojan horse program in the user home directory.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| automount_project | automount | — | — |
| debian | autofs | < autofs 5.0.8-2 (bookworm) | autofs 5.0.8-2 (bookworm) |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_hpc_node | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_workstation | — | — |
CVSS provenance
nvdv2.04.4MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
osv4.4MEDIUM
vendor_debian4.4MEDIUM
vendor_redhat4.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-q56m-rhvg-jwg2: automount 5
ghsa_unreviewed·2022-05-14
CVE-2014-8169 [MEDIUM] GHSA-q56m-rhvg-jwg2: automount 5
automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of the values for the user used to run the mapped program, which allows local users to gain privileges via a Trojan horse program in the user home directory.
OSV
CVE-2014-8169: automount 5
osv·2015-03-18·CVSS 4.4
CVE-2014-8169 [MEDIUM] CVE-2014-8169: automount 5
automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of the values for the user used to run the mapped program, which allows local users to gain privileges via a Trojan horse program in the user home directory.
Ubuntu
autofs vulnerability
vendor_ubuntu·2015-04-27
CVE-2014-8169 autofs vulnerability
Title: autofs vulnerability
Summary: autofs could be made to run programs as an administrator if program maps
were configured.
It was discovered that autofs incorrectly filtered environment variables
when using program maps. When program maps were configured, a local user
could use this issue to escalate privileges.
This update changes the default behaviour by adding a prefix to environment
variables. Sites using program maps will need to adapt to the new variable
names, or revert to the previous names by using a new configuration option
called FORCE_STANDARD_PROGRAM_MAP_ENV.
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
Red Hat
autofs: priv escalation via interpreter load path for program based automount maps
vendor_redhat·2015-03-02·CVSS 4.4
CVE-2014-8169 [MEDIUM] CWE-20 autofs: priv escalation via interpreter load path for program based automount maps
autofs: priv escalation via interpreter load path for program based automount maps
automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of the values for the user used to run the mapped program, which allows local users to gain privileges via a Trojan horse program in the user home directory.
It was found that program-based automounter maps that used interpreted languages such as Python would use standard environment variables to locate and load modules of those languages. A local attacker could potentially use this flaw to escalate their privileges on the system.
Statement: This issue does not affect the version of autofs package as shipped with Red Hat Enterprise Linux 5.
Package: autofs (Red
Debian
CVE-2014-8169: autofs - automount 5.0.8, when a program map uses certain interpreted languages, uses the...
vendor_debian·2014·CVSS 4.4
CVE-2014-8169 [MEDIUM] CVE-2014-8169: autofs - automount 5.0.8, when a program map uses certain interpreted languages, uses the...
automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of the values for the user used to run the mapped program, which allows local users to gain privileges via a Trojan horse program in the user home directory.
Scope: local
bookworm: resolved (fixed in 5.0.8-2)
bullseye: resolved (fixed in 5.0.8-2)
forky: resolved (fixed in 5.0.8-2)
sid: resolved (fixed in 5.0.8-2)
trixie: resolved (fixed in 5.0.8-2)
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-updates/2015-03/msg00033.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1344.htmlhttp://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlhttp://www.securityfocus.com/bid/73211http://www.ubuntu.com/usn/USN-2579-1https://bugzilla.redhat.com/show_bug.cgi?id=1192565https://bugzilla.suse.com/show_bug.cgi?id=917977http://lists.opensuse.org/opensuse-updates/2015-03/msg00033.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1344.htmlhttp://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlhttp://www.securityfocus.com/bid/73211http://www.ubuntu.com/usn/USN-2579-1https://bugzilla.redhat.com/show_bug.cgi?id=1192565https://bugzilla.suse.com/show_bug.cgi?id=917977
2015-03-18
Published