NVD

Id
40682  
Name
CVE-2013-5373  
Description
The RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and 8.0.1, uses world-writable permissions for the rcleartool script, which allows local users to gain privileges by appending commands.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-09-25  
Modified Date
2013-09-25  
Seq
2013-5373  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
205957 40682 CVE-2013-5373 http://www-01.ibm.com/support/docview.wss?uid=swg21648811  View
205958 40682 CVE-2013-5373 clearcase-cve20135373-priv-esc(86791)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22736 JVNDB-2013-004311 IBM Rational ClearCase の RemoteClient コンポーネントにおける権限を取得される脆弱性 IBM Rational ClearCase の RemoteClient コンポーネントは、rcleartool スクリプトに誰でも書き込み可能な権限 (world-writable permission) を使用するため、権限を取得される脆弱性が存在します。 CVE-2013-5373 65315 CVE-2013-5373 40682 6.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004311.html 2013-09-16 2013-09-26 View