NVD

Id
38241  
Name
CVE-2013-2142  
Description
userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) HostCertificate.pem, (2) HostPrivateKey.pem, (3) libimobiledevicerc, (4) RootCertificate.pem, or (5) RootPrivateKey.pem in /tmp/root/.config/libimobiledevice/.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-18  
Published
2014-01-19  
Modified Date
2014-01-21  
Seq
2013-2142  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195550 38241 CVE-2013-2142 http://libiphone.lighthouseapp.com/projects/27916-libiphone/tickets/331-insecure-tmp-directory-use  View
195551 38241 CVE-2013-2142 [oss-security] 20130604 Re: CVE Request: libimobiledevice insecure /tmp use  View
195552 38241 CVE-2013-2142 USN-1927-1  View
195553 38241 CVE-2013-2142 https://bugs.launchpad.net/ubuntu/%2Bsource/libimobiledevice/%2Bbug/1164263  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24287 JVNDB-2013-005862 libimobiledevice の userpref.c における任意のファイルを上書きされる脆弱性 libimobiledevice の userpref.c には、$HOME および $XDG_CONFIG_HOME が設定されていない場合、任意のファイルを上書きされる脆弱性が存在します。 CVE-2013-2142 62084 CVE-2013-2142 38241 3.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005862.html 2013-08-14 2014-01-22 View