Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-0296
HistoryApr 27, 2014 - 12:00 a.m.

CVE-2013-0296

2014-04-2700:00:00
ubuntu.com
ubuntu.com
7

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

EPSS

0

Percentile

5.1%

Race condition in pigz before 2.2.5 uses permissions derived from the umask
when compressing a file before setting that file’s permissions to match
those of the original file, which might allow local users to bypass
intended access permissions while compression is occurring.

Bugs

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

EPSS

0

Percentile

5.1%