Lucene search
HistorySep 16, 2013 - 7:14 p.m.
CVE-2013-4260
cve-2013-4260
ansible
security
symlink attack
nvd
7.1 High
AI Score
Confidence
High
3.3 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
0.0004 Low
EPSS
Percentile
5.1%
lib/ansible/playbook/init.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/.
Affected configurations
Node
redhatansibleMatch1.2
ORredhatansibleMatch1.2.1
ORredhatansibleMatch1.2.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| redhat:ansible | redhat ansible | eq | 1.2 |
| redhat:ansible | redhat ansible | eq | 1.2.1 |
| redhat:ansible | redhat ansible | eq | 1.2.2 |
Related
osv
osv
PYSEC-2013-2
2013-09-16 19:14:00
Ansible Arbitrary File Overwrite Vulnerability
2022-05-14 02:03:36
nvd
nvd
CVE-2013-4260
2013-09-16 19:14:39
prion
prion
Code injection
2013-09-16 19:14:00
github
github
Ansible Arbitrary File Overwrite Vulnerability
2022-05-14 02:03:36
debiancve
debiancve
CVE-2013-4260
2013-09-16 19:14:39
ubuntucve
ubuntucve
CVE-2013-4260
2013-09-16 00:00:00
cvelist
cvelist
CVE-2013-4260
2013-09-16 19:00:00
nessus
nessus
FreeBSD : ansible -- local symlink exploits (a6a9f9d5-205c-11e5-a4a5-002590263bf5)
2015-07-06 00:00:00
Fedora 19 : ansible-1.2.3-2.fc19 (2013-15169)
2013-09-02 00:00:00
Fedora 18 : ansible-1.2.3-2.fc18 (2013-15181)
2013-09-02 00:00:00
freebsd
freebsd
ansible -- local symlink exploits
2013-08-21 00:00:00
openvas
openvas
Fedora Update for ansible FEDORA-2013-15169
2013-09-02 00:00:00
Fedora Update for ansible FEDORA-2013-15169
2013-09-02 00:00:00
Fedora Update for ansible FEDORA-2013-15181
2013-09-02 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: ansible-1.6.6-1.fc19
2014-07-11 02:03:46
[SECURITY] Fedora 18 Update: ansible-1.2.3-2.fc18
2013-08-30 22:58:41
[SECURITY] Fedora 19 Update: ansible-1.2.3-2.fc19
2013-08-30 23:03:44
7.1 High
AI Score
Confidence
High
3.3 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2013-4260