Lucene search

K
nvd[email protected]NVD:CVE-2013-0296
HistoryApr 27, 2014 - 9:55 p.m.

CVE-2013-0296

2014-04-2721:55:05
CWE-264
web.nvd.nist.gov
3

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.2

Confidence

Low

EPSS

0

Percentile

5.1%

Race condition in pigz before 2.2.5 uses permissions derived from the umask when compressing a file before setting that file’s permissions to match those of the original file, which might allow local users to bypass intended access permissions while compression is occurring.

Affected configurations

Nvd
Node
zlibpigzRange2.2.4-1
VendorProductVersionCPE
zlibpigz*cpe:2.3:a:zlib:pigz:*:*:*:*:*:*:*:*

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.2

Confidence

Low

EPSS

0

Percentile

5.1%