Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-6441
HistoryDec 31, 2013 - 12:00 a.m.

CVE-2013-6441

2013-12-3100:00:00
ubuntu.com
ubuntu.com
10

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2
uses read-write permissions when mounting /sbin/init, which allows local
users to gain privileges by modifying the init file.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu13.10noarchlxc< 1.0.0~alpha1-0ubuntu14.1UNKNOWN

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%