CVE-2014-2905
- Source
- https://cve.org/CVERecord?id=CVE-2014-2905
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2014-2905.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2014-2905
- Downstream
DEBIAN (1)
MGASA (1)
- Related
- Published
- 2014-05-02T14:55:07Z
- Modified
- 2026-04-16T06:19:17Z
- Summary
- [none]
- Details
-
fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable socket, related to /tmp/fishd.socket.user permissions.
- References