Lucene search
K

CVE-2013-2142

🗓️ 19 Jan 2014 16:00:00Reported by redhatType 
cve
 cve
🔗 web.nvd.nist.gov👁 47 Views🌐 WEB

userpref.c in libimobiledevice 1.1.4 allows local users to overwrite arbitrary files via symlink attack on specific files

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Cvelist
CVE-2013-2142
19 Jan 201416:00
cvelist
Debian CVE
CVE-2013-2142
19 Jan 201416:00
debiancve
EUVD
EUVD-2013-2107
7 Oct 202500:30
euvd
Fedora
[SECURITY] Fedora 20 Update: libgpod-0.8.3-2.fc20
30 Aug 201403:54
fedora
Fedora
[SECURITY] Fedora 20 Update: upower-0.9.23-3.fc20
30 Aug 201403:54
fedora
Fedora
[SECURITY] Fedora 20 Update: gvfs-1.18.3-3.fc20
30 Aug 201403:54
fedora
Fedora
[SECURITY] Fedora 20 Update: libplist-1.11-2.fc20
30 Aug 201403:54
fedora
Fedora
[SECURITY] Fedora 20 Update: libusbmuxd-1.0.9-2.fc20
30 Aug 201403:54
fedora
Fedora
[SECURITY] Fedora 20 Update: libimobiledevice-1.1.6-2.fc20
30 Aug 201403:54
fedora
Fedora
[SECURITY] Fedora 20 Update: usbmuxd-1.0.9-0.4.c24463e.fc20
30 Aug 201403:54
fedora
Rows per page
NVD
ParameterPositionPathDescriptionCWE
HostCertificate.pempath/tmp/root/.config/libimobiledevice/HostCertificate.pemLocal symlink attack can overwrite HostCertificate.pem when HOME and XDG_CONFIG_HOME are not set.CWE-59
HostPrivateKey.pempath/tmp/root/.config/libimobiledevice/HostPrivateKey.pemLocal symlink attack can overwrite HostPrivateKey.pem when HOME and XDG_CONFIG_HOME are not set.CWE-59
libimobiledevicercpath/tmp/root/.config/libimobiledevice/libimobiledevicercLocal symlink attack can overwrite libimobiledevicerc when HOME and XDG_CONFIG_HOME are not set.CWE-59
RootCertificate.pempath/tmp/root/.config/libimobiledevice/RootCertificate.pemLocal symlink attack can overwrite RootCertificate.pem when HOME and XDG_CONFIG_HOME are not set.CWE-59
RootPrivateKey.pempath/tmp/root/.config/libimobiledevice/RootPrivateKey.pemLocal symlink attack can overwrite RootPrivateKey.pem when HOME and XDG_CONFIG_HOME are not set.CWE-59

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:52Current
6.1Medium risk
Vulners AI Score6.1
CVSS 23.3
EPSS0.00265
47