Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2013-4214
HistoryNov 23, 2013 - 5:55 p.m.

CVE-2013-4214

2013-11-2317:55:00
Alpine Linux Development Team
security.alpinelinux.org
8

6.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:C/A:C

rss-newsfeed.php in Nagios Core 3.4.4, 3.5.1, and earlier, when MAGPIE_CACHE_ON is set to 1, allows local users to overwrite arbitrary files via a symlink attack on /tmp/magpie_cache.

OSVersionArchitecturePackageVersionFilename
Alpine3.12-mainnoarchnagios= 3.5.1-r6UNKNOWN
Alpine3.11-mainnoarchnagios= 3.5.1-r6UNKNOWN

6.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:C/A:C