Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-4116
HistoryApr 22, 2014 - 12:00 a.m.

CVE-2013-4116

2014-04-2200:00:00
ubuntu.com
ubuntu.com
15

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

EPSS

0

Percentile

5.1%

lib/npm.js in Node Packaged Modules (npm) before 1.3.3 allows local users
to overwrite arbitrary files via a symlink attack on temporary files with
predictable names that are created when unpacking archives.

Bugs

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

EPSS

0

Percentile

5.1%