Description
Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | gnome-vfs2 +1 | 2.2.5-2E.1 | RHSA-2004:373 |
Advisories 1
- RHSA-2004:373 Red Hat Security Advisory: gnome-vfs security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- FLSA:1944 vendor-advisory
- oval:org.mitre.oval:def:9854 vdb-entry signature
- RHSA-2004:373 vendor-advisory
- gnome-vfs-extfs-gain-access(16897) vdb-entry
- http://rpmfind.net/linux/RPM/suse/9.3/i386/suse/i586/gnome-vfs-1.0.5-816.2.i586.html