CVE-2013-1813

2013-11-2311:55:00

CWE-264

[email protected]

web.nvd.nist.gov

364

busybox

cve-2013-1813

util-linux

mdev.c

0777 permissions

local users

attack vectors

nvd

8.6 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.

CPENameOperatorVersion
redhat:enterprise_linuxredhat enterprise linuxeq6.0
t-mobile:tm-ac1900t-mobile tm-ac1900eq3.0.0.4.376_3169
busybox:busyboxbusyboxeq1.11.0
busybox:busyboxbusyboxeq1.12.0
busybox:busyboxbusyboxeq1.17.1
busybox:busyboxbusyboxeq1.7.0
busybox:busyboxbusyboxeq1.12.2
busybox:busyboxbusyboxeq1.1.3
busybox:busyboxbusyboxeq0.47
busybox:busyboxbusyboxeq0.49

CPE	Name	Operator	Version
redhat:enterprise_linux	redhat enterprise linux	eq	6.0
t-mobile:tm-ac1900	t-mobile tm-ac1900	eq	3.0.0.4.376_3169
busybox:busybox	busybox	eq	1.11.0
busybox:busybox	busybox	eq	1.12.0
busybox:busybox	busybox	eq	1.17.1
busybox:busybox	busybox	eq	1.7.0
busybox:busybox	busybox	eq	1.12.2
busybox:busybox	busybox	eq	1.1.3
busybox:busybox	busybox	eq	0.47
busybox:busybox	busybox	eq	0.49