CVE-2014-8169 — autofs: priv escalation via interpreter load path for program based automount maps

Back Back to CVE browser

MEDIUM

autofs: priv escalation via interpreter load path for program based automount maps

Published Mar 18, 2015

4.4

MEDIUM

CVSS 2.0

EPSS 0.34%

Description

automount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's USER and HOME environment variable values instead of the values for the user used to run the mapped program, which allows local users to gain privileges via a Trojan horse program in the user home directory.

Affected products

Red Hat Enterprise Linux 6

autofs-1:5.0.5-113.el6

Fixed · RHSA-2015:1344
Red Hat Enterprise Linux 7

autofs-1:5.0.7-54.el7

Fixed · RHSA-2015:2417
Red Hat Enterprise Linux 5

autofs

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	autofs-1:5.0.5-113.el6	Fixed	RHSA-2015:1344
Red Hat Enterprise Linux 7	autofs-1:5.0.7-54.el7	Fixed	RHSA-2015:2417
Red Hat Enterprise Linux 5	autofs	Not affected	n/a

Remediation

Red Hat statement

This issue does not affect the version of autofs package as shipped with Red Hat Enterprise Linux 5.

Metrics

0.34% 0.00335

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00335

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.34% (0.00335)	24.48th	v5 (v2026.06.15)
Jun 15, 2026	0.34% (0.00335)	25.07th	v5 (v2026.06.15)
Mar 17, 2025	0.11% (0.00110)	26.96th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00042)	5.07th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00042)	5.63th	v3 (v2023.03.01)
Mar 6, 2023	1.03% (0.01034)	41.69th	v2 (v2022.01.01)
Feb 13, 2023	1.03% (0.01034)	41.16th	v2 (v2022.01.01)
Feb 3, 2023	1.28% (0.01282)	67.60th	v2 (v2022.01.01)
Sep 10, 2022	1.03% (0.01034)	39.91th	v2 (v2022.01.01)
Apr 1, 2022	1.03% (0.01034)	37.91th	v2 (v2022.01.01)
Feb 4, 2022	1.03% (0.01034)	20.32th	v2 (v2022.01.01)

Weaknesses (2)

CWE-264

CWE-426

References (10)

http://lists.opensuse.org/opensuse-updates/2015-03/msg00033.html
vendor-advisoryx_refsource_SUSEVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1344.html
vendor-advisoryx_refsource_REDHATThird Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
x_refsource_CONFIRM
http://www.securityfocus.com/bid/73211
vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/USN-2579-1
vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/security/cve/CVE-2014-8169
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1192565
x_refsource_CONFIRMIssue Tracking
https://bugzilla.suse.com/show_bug.cgi?id=917977
x_refsource_CONFIRMIssue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2014-8169
https://www.cve.org/CVERecord?id=CVE-2014-8169

Link	Providers	Tags
http://lists.opensuse.org/opensuse-updates/2015-03/msg00033.html		vendor-advisoryx_refsource_SUSEVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1344.html		vendor-advisoryx_refsource_REDHATThird Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html		x_refsource_CONFIRM
http://www.securityfocus.com/bid/73211		vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/USN-2579-1		vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/security/cve/CVE-2014-8169		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1192565		x_refsource_CONFIRMIssue Tracking
https://bugzilla.suse.com/show_bug.cgi?id=917977		x_refsource_CONFIRMIssue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2014-8169
https://www.cve.org/CVERecord?id=CVE-2014-8169