NVD

Id
39778  
Name
CVE-2013-4116  
Description
lib/npm.js in Node Packaged Modules (npm) before 1.3.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names that are created when unpacking archives.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-18  
Published
2014-04-22  
Modified Date
2014-04-23  
Seq
2013-4116  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
202339 39778 CVE-2013-4116 [oss-security] 20130710 npm uses predictable temporary filenames when unpacking tarballs  View
202340 39778 CVE-2013-4116 [oss-security] 20130711 Re: npm uses predictable temporary filenames when unpacking tarballs  View
202341 39778 CVE-2013-4116 61083  View
202342 39778 CVE-2013-4116 node-packaged-cve20134116-symlink(87141)  View
202343 39778 CVE-2013-4116 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=715325  View
202344 39778 CVE-2013-4116 https://bugzilla.redhat.com/show_bug.cgi?id=983917  View
202345 39778 CVE-2013-4116 https://github.com/npm/npm/commit/f4d31693  View
202346 39778 CVE-2013-4116 https://github.com/npm/npm/issues/3635  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24774 JVNDB-2013-006349 Node Packaged Modules の lib/npm.js における任意のファイルを上書きされる脆弱性 Node Packaged Modules (npm) の lib/npm.js には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2013-4116 64058 CVE-2013-4116 39778 3.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006349.html 2013-07-08 2014-04-25 View