NVD

Id
42149  
Name
CVE-2013-7458  
Description
linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2016-08-10  
Modified Date
2016-11-28  
Seq
2013-7458  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
212740 42149 CVE-2013-7458 openSUSE-SU-2016:1980  View
212741 42149 CVE-2013-7458 openSUSE-SU-2016:1981  View
212742 42149 CVE-2013-7458 DSA-3634  View
212743 42149 CVE-2013-7458 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=832460  View
212744 42149 CVE-2013-7458 https://github.com/antirez/linenoise/issues/121  View
212745 42149 CVE-2013-7458 https://github.com/antirez/linenoise/pull/122  View
212746 42149 CVE-2013-7458 https://github.com/antirez/redis/blob/3.2/00-RELEASENOTES  View
212747 42149 CVE-2013-7458 https://github.com/antirez/redis/issues/3284  View
212748 42149 CVE-2013-7458 https://github.com/antirez/redis/pull/1418  View
212749 42149 CVE-2013-7458 https://github.com/antirez/redis/pull/3322  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25177 JVNDB-2013-006754 Redis で使用される linenoise における重要な情報を取得される脆弱性 Redis で使用される linenoise は、.rediscli_history に誰でも読み取り可能な権限 (world-readable permission) を使用するため、重要な情報を取得される脆弱性が存在します。 CVE-2013-7458 67400 CVE-2013-7458 42149 2.1 3.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006754.html 2013-12-01 2016-08-19 View