Lucene search
HistoryMar 08, 2013 - 9:55 p.m.
CVE-2013-0261
packstack
installer
vulnerability
symlink attack
file overwrite
nvd
cve-2013-0261
6.5 Medium
AI Score
Confidence
Low
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
(1) installer/basedefs.py and (2) modules/ospluginutils.py in PackStack allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openstack:essex | openstack essex | eq | - |
| openstack:folsom | openstack folsom | eq | - |
Related
prion
prion
Code injection
2013-03-08 21:55:00
cvelist
cvelist
CVE-2013-0261
2013-03-08 21:00:00
redhat
redhat
(RHSA-2013:0595) Moderate: openstack-packstack security and bug fix update
2013-03-05 00:00:00
6.5 Medium
AI Score
Confidence
Low
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2013-0261