CVE-2009-0115: avaya intuity_audix_lx
Vulnerability summary
CVE-2009-0115 is a high (CVSS 7.8) vulnerability in avaya intuity_audix_lx. EPSS estimates a 0.49% chance of exploitation in the next 30 days, higher than 41% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 30-03-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly other operating systems, uses world-writable permissions for the socket file (aka /var/run/multipathd.sock), which allows local users to send arbitrary commands to the multipath daemon.
CVSS metrics
3 scores · 2 sources · 2 versions- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.49%
Chance of exploitation in the next 30 days
Percentile
41%
Versus all other CVEs
30-day change
0.00 pp
From 0.49% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (download.opensuse.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Avaya3 products
- intuity_audix_lx2.0 | 2.0:sp1 | 2.0:sp2
- message_networking3.1
- messaging_storage_server3.0 | 4.0 | 5.0
Redhat3 products
- device-mapper-multipath< 0:0.4.5-31.el4_7.1 | < 0:0.4.7-23.el5_3.2
- device-mapper-multipath-debuginfo< 0:0.4.5-31.el4_7.1 | < 0:0.4.7-23.el5_3.2
- kpartx< 0:0.4.7-23.el5_3.2
Debian2 products
- multipath-tools< 0.4.8-15 | < 0.4.7-1.1etch2 | < 0.4.8-14+lenny1
- debian_linuxEOL4.0 | 5.0
Suse2 products
Christophe.varoqui1 product
- multipath-tools0.4.8
Fedoraproject1 product
- fedoraEOL9 | 10
Juniper1 product
- ctpview< 7.1 | 7.1
Novell1 product
Opensuse1 product
- opensuse≥ 10.3, ≤ 11.0
9 vendors · 15 products
References
28 links- lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.htmlVendor AdvisoryX Refsource SUSEMailing List
- lists.vmware.com/pipermail/security-announce/2010/000082.htmlMailing ListX Refsource MLISTBroken Link
Show all 28 references
- www.redhat.com/archives/fedora-package-announce/2009-April/msg00236.htmlVendor AdvisoryX Refsource FEDORAMailing List
- lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.htmlVendor AdvisoryX Refsource SUSEMailing List
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9214VDB EntrySignatureX Refsource OVALBroken Link
- www.redhat.com/archives/fedora-package-announce/2009-April/msg00231.htmlVendor AdvisoryX Refsource FEDORAMailing List
- download.opensuse.org/update/10.3-test/repodata/patch-kpartx-6082.xmlX Refsource CONFIRMBroken LinkExploit
