NVD

Id
41470  
Name
CVE-2013-6412  
Description
The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2014-01-22  
Modified Date
2014-01-23  
Seq
2013-6412  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209514 41470 CVE-2013-6412 RHSA-2014:0044  View
209515 41470 CVE-2013-6412 https://bugzilla.redhat.com/show_bug.cgi?id=1034261  View
209516 41470 CVE-2013-6412 https://github.com/hercules-team/augeas/commit/f5b4fc0c  View
209517 41470 CVE-2013-6412 https://github.com/hercules-team/augeas/pull/58  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24326 JVNDB-2013-005901 Augeas の transform.c の transform_save 関数におけるファイルを変更される脆弱性 Augeas の transform.c の transform_save 関数は、パーミッション値を適切に計算しないため、umask が "7" を含む場合、誰でも書き込み可能な権限 (world-writable permission) を新しいファイルに付与することで、ファイルを変更される脆弱性が存在します。 CVE-2013-6412 66354 CVE-2013-6412 41470 4.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005901.html 2013-12-02 2014-01-27 View