Lucene search
HistoryMar 20, 2013 - 3:55 p.m.
CVE-2013-1766
cve-2013-1766
libvirt
device files
local users
write access
6.2 Medium
AI Score
Confidence
Low
3.6 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors.
Related
debiancve
debiancve
CVE-2013-1766
2013-03-20 15:55:00
nessus
nessus
ubuntucve
ubuntucve
CVE-2013-1766
2013-03-20 00:00:00
cvelist
cvelist
CVE-2013-1766
2013-03-20 15:00:00
openvas
openvas
Debian: Security Advisory (DSA-2650-1)
2013-03-16 00:00:00
securityvulns
securityvulns
libvirt weak permissions
2013-03-19 00:00:00
[SECURITY] [DSA 2650-1] libvirt-bin security update
2013-03-19 00:00:00
debian
debian
[SECURITY] [DSA 2650-1] libvirt-bin security update
2013-03-15 21:47:36
[SECURITY] [DSA 2650-2] libvirt regression update
2013-03-17 22:02:28
prion
prion
Code injection
2013-03-20 15:55:00
6.2 Medium
AI Score
Confidence
Low
3.6 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2013-1766