Facebook HipHop Virtual Machine (HHVM) before 3.1.0 does not drop supplemental group memberships within hphp/util/capability.cpp and hphp/util/light-process.cpp, which allows remote attackers to bypass intended access restrictions by leveraging group permissions for a file or directory.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2014-12-28T15:00:00
Updated: 2024-08-06T10:06:00.247Z
Reserved: 2014-02-26T00:00:00
Link: CVE-2014-2209
Vulnrichment
No data.
NVD
Status : Modified
Published: 2014-12-28T15:59:01.237
Modified: 2024-11-21T02:05:51.133
Link: CVE-2014-2209
Redhat
No data.