NVD

Id
38084  
Name
CVE-2013-1959  
Description
kernel/user_namespace.c in the Linux kernel before 3.8.9 does not have appropriate capability requirements for the uid_map and gid_map files, which allows local users to gain privileges by opening a file within an unprivileged process and then modifying the file within a privileged process.  
Reject
 
CVSS Version
2  
CVSS Score
3.7  
Severity
Low  
CVSS Base Score
3.7  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-05-03  
Modified Date
2013-11-30  
Seq
2013-1959  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194657 38084 CVE-2013-1959 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6708075f104c3c9b04b23336bb0366ca30c3931b  View
194658 38084 CVE-2013-1959 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e3211c120a85b792978bcb4be7b2886df18d27f0  View
194659 38084 CVE-2013-1959 25307  View
194660 38084 CVE-2013-1959 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.9  View
194661 38084 CVE-2013-1959 [oss-security] 20130428 Multiple Linux setuid output redirection vulnerabilities  View
194662 38084 CVE-2013-1959 https://github.com/torvalds/linux/commit/6708075f104c3c9b04b23336bb0366ca30c3931b  View
194663 38084 CVE-2013-1959 https://github.com/torvalds/linux/commit/e3211c120a85b792978bcb4be7b2886df18d27f0  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20980 JVNDB-2013-002555 Linux Kernel の kernel/user_namespace.c における権限を取得される脆弱性 Linux Kernel の kernel/user_namespace.c は、uid_map および gid_map ファイルに対する適切な機能要件 (appropriate capability requirement) を持たないため、権限を取得される脆弱性が存在します。 CVE-2013-1959 61901 CVE-2013-1959 38084 3.7 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002555.html 2013-04-25 2013-05-07 View