Lucene search

K
nvd[email protected]NVD:CVE-2013-0296
HistoryApr 27, 2014 - 9:55 p.m.

CVE-2013-0296

2014-04-2721:55:05
CWE-264
web.nvd.nist.gov

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Race condition in pigz before 2.2.5 uses permissions derived from the umask when compressing a file before setting that file’s permissions to match those of the original file, which might allow local users to bypass intended access permissions while compression is occurring.

Affected configurations

NVD
Node
zlibpigzRange2.2.4-1

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%