Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 28/07/2014 Updated: 18/10/2016

CVSS v2 Base Score: 2.4 | Impact Score: 4.9 | Exploitability Score: 1.5

VMScore: 214

Vector: AV:L/AC:H/Au:S/C:N/I:P/A:P

The daemonize.py module in Subversion 1.8.0 prior to 1.8.2 allows local users to gain privileges via a symlink attack on the pid file created for (1) svnwcsub.py or (2) irkerbridge.py when the --pidfile option is used. NOTE: this issue was SPLIT from CVE-2013-4262 based on different affected versions (ADT3).

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache subversion 1.8.0
apache subversion 1.8.1

The daemonizepy module in Subversion 180 before 182 allows local users to gain privileges via a symlink attack on the pid file created for (1) svnwcsubpy or (2) irkerbridgepy when the --pidfile option is used NOTE: this issue was SPLIT from CVE-2013-4262 based on different affected versions (ADT3) ...

CWE-59 https://subversion.apache.org/security/CVE-2013-4262-advisory.txt http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2013-7393

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-7393

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect