Lucene search
PRIOn knowledge basePRION:CVE-2013-4481HistoryNov 23, 2013 - 11:55 a.m.
Race condition
2013-11-2311:55:00
PRIOn knowledge base
www.prio-n.com
4
Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as “authentication secrets.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| enterprise_linux | eq | 6.0 | |
| luci | eq | 0.26.0 |
Related
cve
cve
CVE-2013-4481
2013-11-23 11:55:04
veracode
veracode
Information Disclosure
2019-01-15 08:51:38
Elevation Of Privileges By An Untrusted Search Path Vulnerability
2019-05-02 04:58:57
cvelist
cvelist
CVE-2013-4481
2013-11-23 11:00:00
nvd
nvd
CVE-2013-4481
2013-11-23 11:55:04
redhat
redhat
(RHSA-2013:1603) Moderate: luci security, bug fix, and enhancement update
2013-11-21 00:00:00
nessus
nessus
RHEL 6 : luci (RHSA-2013:1603)
2013-11-21 00:00:00
Scientific Linux Security Update : luci on SL6.x i386/x86_64 (20131121)
2013-12-04 00:00:00
CentOS 6 : luci (CESA-2013:1603)
2014-11-12 00:00:00
centos
centos
luci security update
2013-11-26 13:32:13