Published: 28/10/2013 Updated: 31/01/2022

CVSS v2 Base Score: 3.3 | Impact Score: 4.9 | Exploitability Score: 3.4

VMScore: 295

Vector: AV:L/AC:M/Au:N/C:P/I:P/A:N

systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files.

Vulnerable Product	Search on Vulmon	Subscribe to Product
systemd project systemd

Debian Bug report logs - #725357 CVE-2013-4392: TOCTOU race condition when updating file permissions and SELinux security contexts Package: systemd; Maintainer for systemd is Debian systemd Maintainers <pkg-systemd-maintainers@listsaliothdebianorg>; Source for systemd is src:systemd (PTS, buildd, popcon) Reported by: Mori ...

systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files ...

Compare data from multiple vulnerability scanners to get a more complete picture of potential exposures.

vimp Compare data from multiple vulnerability scanners to get a more complete picture of potential exposures vimp CLI currently supports output from common open source vulnerability scanners like grype, snyk, and trivy The CLI also comes with an embedded data store (sqlite) and support for other databases, like BigQuery Alternatively, vimp can also output to local file (JSON

Compare data from multiple vulnerability scanners to get a more complete picture of potential exposures.

vimp Compare data from multiple vulnerability scanners to get a more complete picture of potential exposures vimp CLI currently supports output from common open source vulnerability scanners like grype, snyk, and trivy The CLI also comes with an embedded data store (sqlite) and support for other databases, like BigQuery Alternatively, vimp can also output to local file (JSON

CWE-59 http://www.openwall.com/lists/oss-security/2013/10/01/9 https://bugzilla.redhat.com/show_bug.cgi?id=859060 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357 https://nvd.nist.gov https://github.com/mchmarny/vimp https://access.redhat.com/security/cve/cve-2013-4392

CVE-2013-4392

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect