CVE-2013-0219

Published Feb 24, 2013

Last updated 2 years ago

Overview

Description
System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.
Source
secalert@redhat.com
NVD status
Modified

Social media

Hype score
Not currently trending

Risk scores

CVSS 2.0

Type
Primary
Base score
3.7
Impact score
6.4
Exploitability score
1.9
Vector string
AV:L/AC:H/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov
CWE-264

Evaluator

Comment
Per https://access.redhat.com/security/cve/CVE-2013-0219 This issue affects the version of sssd shipped with Red Hat Enterprise Linux 5 and 6.
Impact
-
Solution
-

Configurations