CVE-2013-1959 - CERT CVE
ID CVE-2013-1959
Sažetak kernel/user_namespace.c in the Linux kernel before 3.8.9 does not have appropriate capability requirements for the uid_map and gid_map files, which allows local users to gain privileges by opening a file within an unprivileged process and then modifying the file within a privileged process.
Reference
CVSS
Base: 3.7
Impact: 6.4
Exploitability:1.9
Pristup
VektorSloženostAutentikacija
LOCAL HIGH NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL PARTIAL
CVSS vektor AV:L/AC:H/Au:N/C:P/I:P/A:P
Zadnje važnije ažuriranje 13-02-2023 - 04:42
Objavljeno 03-05-2013 - 11:57