CVE-2013-7172

Опубликовано: 21 нояб. 2019

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use RPATH information to execute arbitrary code with root privileges.

Ссылки

http://www.openwall.com/lists/oss-security/2013/12/20/1
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7172
Issue Tracking
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/89916
Third Party Advisory
VDB Entry
https://security-tracker.debian.org/tracker/CVE-2013-7172
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/12/20/1
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7172
Issue Tracking
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/89916
Third Party Advisory
VDB Entry
https://security-tracker.debian.org/tracker/CVE-2013-7172
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:slackware:slackware_linux:13.1:*:*:*:*:*:*:*

cpe:2.3:o:slackware:slackware_linux:13.37:*:*:*:*:*:*:*

cpe:2.3:o:slackware:slackware_linux:14.0:*:*:*:*:*:*:*

cpe:2.3:o:slackware:slackware_linux:14.1:*:*:*:*:*:*:*

EPSS

Процентиль: 32%

0.00126

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2013-7172

CVSS3: 7.8

ubuntu

около 6 лет назад

CVE-2013-7172

redhat

около 12 лет назад

CVE-2013-7172

CVSS3: 7.8

debian

около 6 лет назад

Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permission ...

GHSA-m56q-mw4m-85fm

CVSS3: 7.8

github

почти 4 года назад

EPSS

Процентиль: 32%

0.00126

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-20