Lucene search
HistoryJan 26, 2014 - 1:55 a.m.
CVE-2013-5364
secunia
csi agent
cve-2013-5364
red hat linux
configuration
vulnerability
3.6 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Secunia CSI Agent 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, and 7.0.0.21 and earlier, when running on Red Hat Linux, uses world-readable and world-writable permissions for /etc/csia_config.xml, which allows local users to change CSI Agent configuration by modifying this file.
Affected configurations
Node
secuniacsi_agentRange6.0.0–6.0.0.15017
ORsecuniacsi_agentRange6.0.1–6.0.1.1007
ORsecuniacsi_agentRange7.0.0–7.0.0.21
redhatenterprise_linux
Related
prion
prion
Design/Logic Flaw
2014-01-26 01:55:00
cvelist
cvelist
CVE-2013-5364
2014-01-26 01:00:00
nvd
nvd
CVE-2013-5364
2014-01-26 01:55:04
kaspersky
kaspersky
KLA10319 Vulnerability in Secunia CSI Agent
2014-01-25 00:00:00
3.6 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2013-5364