CVE-2013-7172

HIGH

7.8

Beschreibung

Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use RPATH information to execute arbitrary code with root privileges.

CVE Details

CVSS v3.1 Bewertung7.8

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorLOCAL

KomplexitatLOW

Erforderliche PrivilegienLOW

BenutzerinteraktionNONE

Veroffentlicht11/21/2019

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

slackware:slackware_linux

Schwachen (CWE)

CWE-20

Referenzen

http://www.openwall.com/lists/oss-security/2013/12/20/1(cve@mitre.org)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7172(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/89916(cve@mitre.org)

https://security-tracker.debian.org/tracker/CVE-2013-7172(cve@mitre.org)

http://www.openwall.com/lists/oss-security/2013/12/20/1(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7172(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/89916(af854a3a-2127-422b-91ae-364da2661108)

https://security-tracker.debian.org/tracker/CVE-2013-7172(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.