CVE-2009-3289 Privilege escalation in n/a
Local attackers can modify other users' files by exploiting incorrect permission handling in GLib's file copy function.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2009-3289?
CVE-2009-3289 is a high-severity vulnerability in Opensuse Opensuse, published on 22 Sep 2009. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link (777), which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory.
Weakness: CWE-732
Which versions are affected by CVE-2009-3289?
It affects 3 products.
Products include Gnome Glib, Opensuse Opensuse, Suse Suse Linux Enterprise Server.
How do I fix CVE-2009-3289?
Apply the vendor's patch.
Is CVE-2009-3289 being exploited?
There is no known exploitation of CVE-2009-3289 in the wild and no public exploit code.
Other vulnerabilities in Opensuse Opensuse
- CVE-2020-35457 Integer overflow in n/a
- CVE-2025-13601 Glib: integer overflow in in g_escape_uri_string()
- CVE-2026-58016 Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
- CVE-2025-4056 Glib: glib crash after long command line
- CVE-2019-13012 Misconfiguration in n/a
Sources
Also known as DEBIAN-CVE-2009-3289, GHSA-q7q8-g4m3-j3pq.