NVD

Id
41704  
Name
CVE-2013-6825  
Description
(1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrcv.cc in dcmpstat/apps/, (7) dcmpstat/tests/msgserv.cc, and (8) dcmqrdb/apps/dcmqrscp.cc in DCMTK 3.6.1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by creating a large number of processes.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2014-06-10  
Modified Date
2014-06-25  
Seq
2013-6825  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
210843 41704 CVE-2013-6825 http://git.dcmtk.org/web?p=dcmtk.git;a=blob;f=CHANGES.361  View
210844 41704 CVE-2013-6825 http://packetstormsecurity.com/files/126883/DCMTK-Privilege-Escalation.html  View
210845 41704 CVE-2013-6825 20140604 CVE-2013-6825 DCMTK Root Privilege escalation  View
210846 41704 CVE-2013-6825 20140602 CVE-2013-6825 DCMTK Root Privilege escalation  View
210847 41704 CVE-2013-6825 67784  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25011 JVNDB-2013-006586 DCMTK における権限を取得される脆弱性 DCMTK の以下のファイルは、setuid システムコールの戻り値を適切にチェックしないため、権限を取得される脆弱性が存在します。 CVE-2013-6825 66767 CVE-2013-6825 41704 7.2 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006586.html 2013-11-24 2014-06-13 View