Lucene search
Ubuntu.comUB:CVE-2013-1813HistoryNov 23, 2013 - 12:00 a.m.
CVE-2013-1813
2013-11-2300:00:00
ubuntu.com
ubuntu.com
20
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.1%
util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent
directories when creating nested directories under /dev/, which allows
local users to have unknown impact and attack vectors.
Bugs
Notes
| Author | Note |
|---|---|
| seth-arnold | “low” because mdev doesn’t easily support nested directories |
Related
openvas
openvas
RedHat Update for busybox RHSA-2013:1732-02
2013-11-21 00:00:00
Mageia: Security Advisory (MGASA-2013-0358)
2022-01-28 00:00:00
RedHat Update for busybox RHSA-2013:1732-02
2013-11-21 00:00:00
redhat
redhat
(RHSA-2013:1732) Low: busybox security and bug fix update
2013-11-21 00:00:00
(RHSA-2013:1527) Important: rhev-hypervisor6 security and bug fix update
2013-11-21 00:00:00
debiancve
debiancve
CVE-2013-1813
2013-11-23 11:55:04
nessus
nessus
RHEL 6 : busybox (RHSA-2013:1732)
2013-11-21 00:00:00
Oracle Linux 6 : busybox (ELSA-2013-1732)
2013-11-27 00:00:00
CentOS 6 : busybox (CESA-2013:1732)
2014-11-12 00:00:00
cve
cve
CVE-2013-1813
2013-11-23 11:55:04
prion
prion
Code injection
2013-11-23 11:55:00
veracode
veracode
Insecure File Permissions
2019-01-15 08:51:59
nvd
nvd
CVE-2013-1813
2013-11-23 11:55:04
cvelist
cvelist
CVE-2013-1813
2013-11-23 11:00:00
centos
centos
busybox security update
2013-11-26 13:31:11
oraclelinux
oraclelinux
busybox security and bug fix update
2013-11-25 00:00:00
mageia
mageia
Updated busybox package fixes security vulnerability
2013-12-01 01:33:39
gentoo
gentoo
BusyBox: Multiple vulnerabilities
2013-12-03 00:00:00
packetstorm
packetstorm
Phoenix Contact TC Router / TC Cloud Client Command Injection
2020-03-14 00:00:00
ZTE Mobile Hotspot MS910S Backdoor / Hardcoded Password
2020-08-27 00:00:00
debian
debian
[SECURITY] [DLA 2559-1] busybox security update
2021-02-15 11:56:52
[SECURITY] [DLA 1445-1] busybox security update
2018-07-27 04:39:37
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.1%
Related for UB:CVE-2013-1813