CVE

Id
61954  
CVE No.
CVE-2013-2007  
Status
Candidate  
Description
The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
620314 61954 CVE-2013-2007 MLIST:[oss-security] 20130506 Xen Security Advisory 51 (CVE-2013-2007) - qemu guest agent (qga) insecure file permissions  View
620315 61954 CVE-2013-2007 URL:http://www.openwall.com/lists/oss-security/2013/05/06/5  View
620316 61954 CVE-2013-2007 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=956082  View
620317 61954 CVE-2013-2007 CONFIRM:http://git.qemu.org/?p=qemu.git;a=commit;h=c689b4f1bac352dcfd6ecb9a1d45337de0f1de67  View
620318 61954 CVE-2013-2007 REDHAT:RHSA-2013:0791  View
620319 61954 CVE-2013-2007 URL:http://rhn.redhat.com/errata/RHSA-2013-0791.html  View
620320 61954 CVE-2013-2007 REDHAT:RHSA-2013:0896  View
620321 61954 CVE-2013-2007 URL:http://rhn.redhat.com/errata/RHSA-2013-0896.html  View
620322 61954 CVE-2013-2007 SUSE:openSUSE-SU-2013:1202  View
620323 61954 CVE-2013-2007 URL:http://lists.opensuse.org/opensuse-updates/2013-07/msg00057.html  View
620324 61954 CVE-2013-2007 BID:59675  View
620325 61954 CVE-2013-2007 URL:http://www.securityfocus.com/bid/59675  View
620326 61954 CVE-2013-2007 OSVDB:93032  View
620327 61954 CVE-2013-2007 URL:http://osvdb.org/93032  View
620328 61954 CVE-2013-2007 SECTRACK:1028521  View
620329 61954 CVE-2013-2007 URL:http://www.securitytracker.com/id/1028521  View
620330 61954 CVE-2013-2007 SECUNIA:53325  View
620331 61954 CVE-2013-2007 URL:http://secunia.com/advisories/53325  View
620332 61954 CVE-2013-2007 XF:qemu-cve20132007-priv-esc(84047)  View

Related JVN