What’s Vulnerable › Vulnerabilities

CVE-2008-2232

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-07-17 · updated 2026-06-16
• Weakness: CWE-264

Description

The expand_template function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname.

Affected products

• Afuse: 0.2

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490921
• http://secunia.com/advisories/31086
• http://secunia.com/advisories/31131
• http://secunia.com/advisories/36358
• http://www.debian.org/security/2008/dsa-1611
• http://www.securityfocus.com/bid/30245
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43834
• https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00921.html
• https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00947.html
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490921
• http://secunia.com/advisories/31086
• http://secunia.com/advisories/31131

Get alerted when CVE-2008-2232 or the next vulnerability affects your stack