CVE-2013-2142

2014-01-1918:02:00

Debian Security Bug Tracker

security-tracker.debian.org

0.0004 Low

EPSS

Percentile

5.2%

JSON

userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) HostCertificate.pem, (2) HostPrivateKey.pem, (3) libimobiledevicerc, (4) RootCertificate.pem, or (5) RootPrivateKey.pem in /tmp/root/.config/libimobiledevice/.

OSVersionArchitecturePackageVersionFilename
Debian12alllibimobiledevice< 1.1.5-0.1libimobiledevice_1.1.5-0.1_all.deb
Debian11alllibimobiledevice< 1.1.5-0.1libimobiledevice_1.1.5-0.1_all.deb
Debian10alllibimobiledevice< 1.1.5-0.1libimobiledevice_1.1.5-0.1_all.deb
Debian999alllibimobiledevice< 1.1.5-0.1libimobiledevice_1.1.5-0.1_all.deb
Debian13alllibimobiledevice< 1.1.5-0.1libimobiledevice_1.1.5-0.1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libimobiledevice	< 1.1.5-0.1	libimobiledevice_1.1.5-0.1_all.deb
Debian	11	all	libimobiledevice	< 1.1.5-0.1	libimobiledevice_1.1.5-0.1_all.deb
Debian	10	all	libimobiledevice	< 1.1.5-0.1	libimobiledevice_1.1.5-0.1_all.deb
Debian	999	all	libimobiledevice	< 1.1.5-0.1	libimobiledevice_1.1.5-0.1_all.deb
Debian	13	all	libimobiledevice	< 1.1.5-0.1	libimobiledevice_1.1.5-0.1_all.deb

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for DEBIANCVE:CVE-2013-2142