NVD

Id
36575  
Name
CVE-2013-0219  
Description
System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user"s files.  
Reject
 
CVSS Version
2  
CVSS Score
3.7  
Severity
Low  
CVSS Base Score
3.7  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-02-24  
Modified Date
2013-10-10  
Seq
2013-0219  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
186858 36575 CVE-2013-0219 http://git.fedorahosted.org/cgit/sssd.git/commit/?id=020bf88fd1c5bdac8fc671b37c7118f5378c7047  View
186859 36575 CVE-2013-0219 http://git.fedorahosted.org/cgit/sssd.git/commit/?id=3843b284cd3e8f88327772ebebc7249990fd87b9  View
186860 36575 CVE-2013-0219 http://git.fedorahosted.org/cgit/sssd.git/commit/?id=94cbf1cfb0f88c967f1fb0a4cf23723148868e4a  View
186861 36575 CVE-2013-0219 http://git.fedorahosted.org/cgit/sssd.git/commit/?id=e864d914a44a37016736554e9257c06b18c57d37  View
186862 36575 CVE-2013-0219 FEDORA-2013-1795  View
186863 36575 CVE-2013-0219 FEDORA-2013-1826  View
186864 36575 CVE-2013-0219 RHSA-2013:0508  View
186865 36575 CVE-2013-0219 RHSA-2013:1319  View
186866 36575 CVE-2013-0219 57539  View
186867 36575 CVE-2013-0219 https://bugzilla.redhat.com/show_bug.cgi?id=884254  View
186868 36575 CVE-2013-0219 https://fedorahosted.org/sssd/ticket/1782  View
186869 36575 CVE-2013-0219 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.4  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20108 JVNDB-2013-001683 System Security Services Daemon における任意のファイルを作成される脆弱性 System Security Services Daemon (SSSD) には、ユーザのホームディレクトリツリーを (1) 作成、(2) コピー、または (3) 削除する際、任意のファイルを作成、変更、または削除される脆弱性が存在します。 CVE-2013-0219 60161 CVE-2013-0219 36575 3.7 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001683.html 2013-01-23 2013-11-05 View