Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-0296
HistoryApr 27, 2014 - 12:00 a.m.

CVE-2013-0296

2014-04-2700:00:00
ubuntu.com
ubuntu.com
6

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%

Race condition in pigz before 2.2.5 uses permissions derived from the umask
when compressing a file before setting that file’s permissions to match
those of the original file, which might allow local users to bypass
intended access permissions while compression is occurring.

Bugs

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%