Home > Vulnerability Database > CVE-2013-2207

Mend.io Vulnerability Database

CVE-2013-2207

Good to know:

Date: October 9, 2013

pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.

Language: C

Severity Score

2.1

Related Resources (12)

Url: https://sourceware.org/ml/libc-alpha/2013-08/msg00160.html

Url: http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html

Url: http://secunia.com/advisories/55113

Url: http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2013-2207

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2013:283

Url: http://www.ubuntu.com/usn/USN-2985-1

Url: http://www.ubuntu.com/usn/USN-2985-2

Url: https://security.gentoo.org/glsa/201503-04

Url: https://bugzilla.redhat.com/show_bug.cgi?id=976408

Url: https://sourceware.org/bugzilla/show_bug.cgi?id=15755

Url: https://www.mend.io/vulnerability-database/CVE-2013-2207

Severity Score

2.1

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

Top Fix

Upgrade Version

Upgrade to version 2.18

Learn More

CVSS v3

Base Score:	2.1
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	PARTIAL

CVSS v2

Base Score:	4.9
Access Vector (AV):
Access Complexity (AC):
Authentication (AU):
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2013-2207

Good to know:

Date: October 9, 2013

Language: C

Severity Score

Related Resources (12)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v3

CVSS v2

Do you need more information?