Lucene search
MitreCVE-2013-5724HistorySep 12, 2013 - 1:31 p.m.
CVE-2013-5724
2013-09-1213:31:18
CWE-264
mitre
web.nvd.nist.gov
31
cve-2013-5724
phpbb3
debian
gnu/linux
world-writable
permissions
cache files
nvd
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.4
Confidence
Low
EPSS
0
Percentile
5.1%
Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache files, which allows local users to modify the file contents via standard filesystem write operations.
Affected configurations
Node
debianphpbb3Range≤3.0.11-3
ORdebianphpbb3Match3.0.0-1
ORdebianphpbb3Match3.0.0-2
ORdebianphpbb3Match3.0.0-b5
ORdebianphpbb3Match3.0.0-rc1
ORdebianphpbb3Match3.0.0-rc2-1
ORdebianphpbb3Match3.0.0-rc3-1
ORdebianphpbb3Match3.0.0-rc4-1
ORdebianphpbb3Match3.0.0-rc5-1
ORdebianphpbb3Match3.0.0-rc7-1
ORdebianphpbb3Match3.0.1-1
ORdebianphpbb3Match3.0.2-1
ORdebianphpbb3Match3.0.2-2
ORdebianphpbb3Match3.0.2-3
ORdebianphpbb3Match3.0.2-4
ORdebianphpbb3Match3.0.4-1
ORdebianphpbb3Match3.0.7-p1-1
ORdebianphpbb3Match3.0.7-p1-2
ORdebianphpbb3Match3.0.7-p1-3
ORdebianphpbb3Match3.0.7-p1-4
ORdebianphpbb3Match3.0.7-p1-5
ORdebianphpbb3Match3.0.9-1
ORdebianphpbb3Match3.0.10-1
ORdebianphpbb3Match3.0.10-2
ORdebianphpbb3Match3.0.11-1
ORdebianphpbb3Match3.0.11-2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| debian | phpbb3 | * | cpe:2.3:a:debian:phpbb3:*:*:*:*:*:*:*:* |
| debian | phpbb3 | 3.0.0-1 | cpe:2.3:a:debian:phpbb3:3.0.0-1:*:*:*:*:*:*:* |
| debian | phpbb3 | 3.0.0-2 | cpe:2.3:a:debian:phpbb3:3.0.0-2:*:*:*:*:*:*:* |
| debian | phpbb3 | 3.0.0-b5 | cpe:2.3:a:debian:phpbb3:3.0.0-b5:*:*:*:*:*:*:* |
| debian | phpbb3 | 3.0.0-rc1 | cpe:2.3:a:debian:phpbb3:3.0.0-rc1:*:*:*:*:*:*:* |
| debian | phpbb3 | 3.0.0-rc2-1 | cpe:2.3:a:debian:phpbb3:3.0.0-rc2-1:*:*:*:*:*:*:* |
| debian | phpbb3 | 3.0.0-rc3-1 | cpe:2.3:a:debian:phpbb3:3.0.0-rc3-1:*:*:*:*:*:*:* |
| debian | phpbb3 | 3.0.0-rc4-1 | cpe:2.3:a:debian:phpbb3:3.0.0-rc4-1:*:*:*:*:*:*:* |
| debian | phpbb3 | 3.0.0-rc5-1 | cpe:2.3:a:debian:phpbb3:3.0.0-rc5-1:*:*:*:*:*:*:* |
| debian | phpbb3 | 3.0.0-rc7-1 | cpe:2.3:a:debian:phpbb3:3.0.0-rc7-1:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2013-5724
2013-09-12 00:00:00
prion
prion
Code injection
2013-09-12 13:31:00
cvelist
cvelist
CVE-2013-5724
2013-09-11 14:00:00
nvd
nvd
CVE-2013-5724
2013-09-12 13:31:18
openvas
openvas
Debian: Security Advisory (DSA-2752-1)
2013-09-06 00:00:00
Debian Security Advisory DSA 2752-1 (phpbb3 - permissions too wide)
2013-09-07 00:00:00
nessus
nessus
Debian DSA-2752-1 : phpbb3 - permissions too wide
2013-09-08 00:00:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.4
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2013-5724