Lucene search
Gentoo FoundationMGASA-2014-0025HistoryJan 25, 2014 - 12:59 a.m.
Updated perl-Proc-Daemon package fixes CVE-2013-7135
2014-01-2500:59:38
Gentoo Foundation
advisories.mageia.org
9
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.1%
Updated perl-Proc-Daemon package fixes security vulnerability: It was reported that perl-Proc-Daemon, when instructed to write a pid file, does that with a umask set to 0, so the pid file ends up with mode 666, allowing any user on the system to overwrite it (CVE-2013-7135).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 3 | noarch | perl-proc-daemon | < 0.140.0-2.1 | perl-Proc-Daemon-0.140.0-2.1.mga3 |
Related
cve
cve
CVE-2013-7135
2014-01-28 00:55:03
nessus
nessus
Fedora 19 : perl-Proc-Daemon-0.14-9.fc19 (2013-23635)
2013-12-28 00:00:00
Mandriva Linux Security Advisory : perl-Proc-Daemon (MDVSA-2014:021)
2014-01-27 00:00:00
Fedora 20 : perl-Proc-Daemon-0.14-9.fc20 (2013-23594)
2013-12-28 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: perl-Proc-Daemon-0.14-9.fc19
2013-12-28 02:08:31
[SECURITY] Fedora 20 Update: perl-Proc-Daemon-0.14-9.fc20
2013-12-28 02:01:45
[SECURITY] Fedora 18 Update: perl-Proc-Daemon-0.14-9.fc18
2013-12-28 02:12:47
openvas
openvas
Fedora Update for perl-Proc-Daemon FEDORA-2013-23635
2013-12-30 00:00:00
Fedora Update for perl-Proc-Daemon FEDORA-2013-23635
2013-12-30 00:00:00
Fedora Update for perl-Proc-Daemon FEDORA-2013-23646
2013-12-30 00:00:00
cvelist
cvelist
CVE-2013-7135
2014-01-28 00:00:00
nvd
nvd
CVE-2013-7135
2014-01-28 00:55:03
securityvulns
securityvulns
perl-Proc-Daemon weak permissions
2014-02-03 00:00:00
[ MDVSA-2014:021 ] perl-Proc-Daemon
2014-02-03 00:00:00
ubuntucve
ubuntucve
CVE-2013-7135
2014-01-28 00:00:00
prion
prion
Design/Logic Flaw
2014-01-28 00:55:00
debiancve
debiancve
CVE-2013-7135
2014-01-28 00:55:03
freebsd
freebsd
otrs -- Scheduler Process ID File Access
2015-09-17 00:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.1%
Related for MGASA-2014-0025