CVE-2014-2079

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-07-16 · updated 2026-06-17
Weakness: CWE-264

Description

X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares.

Affected products

Debian Linux: 7.0, 8.0
X File Explorer Project X File Explorer: 1.32.5

References

http://www.openwall.com/lists/oss-security/2014/02/24/5
http://www.securityfocus.com/bid/65748
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739536
https://bugzilla.redhat.com/show_bug.cgi?id=1069066
https://exchange.xforce.ibmcloud.com/vulnerabilities/91519
http://www.openwall.com/lists/oss-security/2014/02/24/5
http://www.securityfocus.com/bid/65748
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739536
https://bugzilla.redhat.com/show_bug.cgi?id=1069066
https://exchange.xforce.ibmcloud.com/vulnerabilities/91519

Get alerted when CVE-2014-2079 or the next vulnerability affects your stack