Published: 24/02/2013 Updated: 13/02/2023

CVSS v2 Base Score: 3.7 | Impact Score: 6.4 | Exploitability Score: 1.9

VMScore: 329

Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P

System Security Services Daemon (SSSD) prior to 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.

Vulnerable Product	Search on Vulmon	Subscribe to Product
fedoraproject sssd 0.5.0
fedoraproject sssd 1.8.0
fedoraproject sssd 1.5.8
fedoraproject sssd 1.7.0
fedoraproject sssd 0.3.1
fedoraproject sssd 1.2.3
fedoraproject sssd 1.9.1
fedoraproject sssd 1.5.2
fedoraproject sssd 1.0.4
fedoraproject sssd 1.6.4
fedoraproject sssd 1.8.2
fedoraproject sssd 1.5.13
fedoraproject sssd 0.7.1
fedoraproject sssd 1.4.0
fedoraproject sssd 1.2.2
fedoraproject sssd 1.1.92
fedoraproject sssd 1.2.4
fedoraproject sssd 1.9.2
fedoraproject sssd 1.8.5
fedoraproject sssd 1.5.0
fedoraproject sssd 1.5.5
fedoraproject sssd 1.8.6
fedoraproject sssd 1.5.10
fedoraproject sssd 1.0.2
fedoraproject sssd 1.5.12
fedoraproject sssd 1.0.99
fedoraproject sssd 1.0.5
fedoraproject sssd 1.5.6.1
fedoraproject sssd 0.2.1
fedoraproject sssd 1.5.14
fedoraproject sssd 1.0.0
fedoraproject sssd 0.3.0
fedoraproject sssd 1.2.91
fedoraproject sssd 1.1.2
fedoraproject sssd 1.5.16
fedoraproject sssd 1.5.7
fedoraproject sssd 1.3.1
fedoraproject sssd 1.5.3
fedoraproject sssd 1.0.1
fedoraproject sssd 1.6.1
fedoraproject sssd 1.1.0
fedoraproject sssd 1.2.0
fedoraproject sssd 1.2.1
fedoraproject sssd 1.5.11
fedoraproject sssd 1.6.2
fedoraproject sssd 1.0.6
fedoraproject sssd 0.99.0
fedoraproject sssd 1.8.3
fedoraproject sssd 1.5.9
fedoraproject sssd 1.1.1
fedoraproject sssd 0.4.0
fedoraproject sssd
fedoraproject sssd 1.9.0
fedoraproject sssd 1.4.1
fedoraproject sssd 0.3.2
fedoraproject sssd 1.5.15
fedoraproject sssd 1.0.3
fedoraproject sssd 1.6.3
fedoraproject sssd 0.99.1
fedoraproject sssd 1.5.1
fedoraproject sssd 1.1.91
fedoraproject sssd 1.8.4
fedoraproject sssd 0.3.3
fedoraproject sssd 1.6.0
fedoraproject sssd 1.3.0
fedoraproject sssd 1.5.6
fedoraproject sssd 0.6.0
fedoraproject sssd 0.4.1
fedoraproject sssd 0.7.0
fedoraproject sssd 0.6.1
fedoraproject sssd 1.5.4
fedoraproject sssd 1.5.17
fedoraproject sssd 1.8.1
redhat enterprise linux 6.0
redhat enterprise linux 5

Debian Bug report logs - #698871 CVE-2013-0219 CVE-2013-0220 Package: sssd; Maintainer for sssd is Debian SSSD Team <pkg-sssd-devel@alioth-listsdebiannet>; Source for sssd is src:sssd (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Thu, 24 Jan 2013 18:45:02 UTC Severity: grave Tags: pa ...

Synopsis Low: sssd security and bug fix update Type/Severity Security Advisory: Low Topic Updated sssd packages that fix one security issue and several bugs are nowavailable for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having lowsecurity impact A Common Vulnera ...

Synopsis Low: sssd security, bug fix and enhancement update Type/Severity Security Advisory: Low Topic Updated sssd packages that fix two security issues, multiple bugs, and addvarious enhancements are now available for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as h ...

CWE-264 http://www.securityfocus.com/bid/57539 http://git.fedorahosted.org/cgit/sssd.git/commit/?id=e864d914a44a37016736554e9257c06b18c57d37 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.4 http://git.fedorahosted.org/cgit/sssd.git/commit/?id=020bf88fd1c5bdac8fc671b37c7118f5378c7047 http://git.fedorahosted.org/cgit/sssd.git/commit/?id=94cbf1cfb0f88c967f1fb0a4cf23723148868e4a https://bugzilla.redhat.com/show_bug.cgi?id=884254 http://git.fedorahosted.org/cgit/sssd.git/commit/?id=3843b284cd3e8f88327772ebebc7249990fd87b9 http://secunia.com/advisories/52315 http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098434.html http://rhn.redhat.com/errata/RHSA-2013-0508.html http://secunia.com/advisories/51928 https://fedorahosted.org/sssd/ticket/1782 http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098613.html http://rhn.redhat.com/errata/RHSA-2013-1319.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698871 https://nvd.nist.gov

CVE-2013-0219

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect