ID |
CVE-2013-4262
|
Sažetak |
svnwcsub.py in Subversion 1.8.0 before 1.8.3, when using the --pidfile option and running in foreground mode, allows local users to gain privileges via a symlink attack on the pid file. NOTE: this issue was SPLIT due to different affected versions (ADT3). The irkerbridge.py issue is covered by CVE-2013-7393. |
Reference |
|
CVSS |
Base: | 2.4 |
Impact: | 4.9 |
Exploitability: | 1.5 |
|
Pristup |
Vektor | Složenost | Autentikacija |
LOCAL |
HIGH |
SINGLE |
|
Impact |
Povjerljivost | Cjelovitost | Dostupnost |
NONE |
PARTIAL |
PARTIAL |
|
CVSS vektor |
AV:L/AC:H/Au:S/C:N/I:P/A:P |
Zadnje važnije ažuriranje |
18-10-2016 - 03:43 |
Objavljeno |
28-07-2014 - 19:55 |