CVE-2013-4419
Notifications for a CVE
Stay informed of any changes for a specific CVE.
CVE Descriptions
The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.
CVE Informations
Related Weaknesses
| Weakness Name | Source | |
|---|---|---|
| Category : Permissions, Privileges, and Access Controls Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control. |
Metrics
| Metrics | Score | Severity | CVSS Vector | Source |
|---|---|---|---|---|
| V2 | 6.8 | AV:A/AC:H/Au:N/C:C/I:C/A:C | [email protected] |
EPSS
EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.
EPSS Score
The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.
EPSS Percentile
The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
Products Mentioned
Configuraton 0
Libguestfs>>Libguestfs >> Version From (including) 1.20.0 To (including) 1.20.12
- Libguestfs>>Libguestfs >> Version 1.20.0 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.20.1 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.20.2 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.20.3 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.20.4 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.20.5 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.20.6 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.20.7 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.20.8 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.20.9 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.20.10 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.20.11 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.20.12 (Open CPE detail)
Libguestfs>>Libguestfs >> Version From (including) 1.22.0 To (including) 1.22.7
- Libguestfs>>Libguestfs >> Version 1.22.0 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.22.1 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.22.2 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.22.3 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.22.4 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.22.5 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.22.6 (Open CPE detail)
- Libguestfs>>Libguestfs >> Version 1.22.7 (Open CPE detail)
Configuraton 0
Suse>>Suse_linux_enterprise_software_development_kit >> Version 11.0
- Suse>>Suse_linux_enterprise_software_development_kit >> Version 11.0 (Open CPE detail)
Novell>>Suse_linux_enterprise_server >> Version 11.0
- Novell>>Suse_linux_enterprise_server >> Version 11.0 (Open CPE detail)
- Novell>>Suse_linux_enterprise_server >> Version 11.0 (Open CPE detail)
- Novell>>Suse_linux_enterprise_server >> Version 11.0 (Open CPE detail)
- Novell>>Suse_linux_enterprise_server >> Version 11.0 (Open CPE detail)
References
https://www.redhat.com/archives/libguestfs/2013-October/msg00031.html
Tags : mailing-list, x_refsource_MLIST
Tags : mailing-list, x_refsource_MLIST
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE
Tags : vendor-advisory, x_refsource_SUSE
2025©
tesweb SA
