Lucene search

K
cve[email protected]CVE-2013-2207
HistoryOct 09, 2013 - 10:55 p.m.

CVE-2013-2207

2013-10-0922:55:00
CWE-264
web.nvd.nist.gov
60
cve-2013-2207
gnu c library
glibc
libc6
permissions
tty files
local users
fuse file system

8 High

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:P/I:P/A:N

0.0004 Low

EPSS

Percentile

5.3%

pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.

8 High

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:P/I:P/A:N

0.0004 Low

EPSS

Percentile

5.3%