CVE-2013-2142

2013-06-0400:00:00

ubuntu.com

3.3 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are
not set, allows local users to overwrite arbitrary files via a symlink
attack on (1) HostCertificate.pem, (2) HostPrivateKey.pem, (3)
libimobiledevicerc, (4) RootCertificate.pem, or (5) RootPrivateKey.pem in
/tmp/root/.config/libimobiledevice/.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.10noarchlibimobiledevice< 1.1.4-1ubuntu3.2UNKNOWN
ubuntu13.04noarchlibimobiledevice< 1.1.4-1ubuntu6.2UNKNOWN