PT-2014-2704 · Opensuse · Aaa Base+1

Publicado 2014-01-11 · Atualizado 2018-10-30 · CVE-2013-3713

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Média

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions aaa base versions prior to 16.26.1

Description The issue in the image creation configuration allows local users to obtain sensitive information and possibly have other unspecified impacts by reading /etc/shadow, as demonstrated in openSUSE 13.1 KDE when installing from a live image.

Recommendations For versions prior to 16.26.1, update to version 16.26.1 or later to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-3713

Produtos afetados

Aaa Base

Opensuse

Referências · 3

• 🔥 http://lists.opensuse.org/opensuse-updates/2013-12/msg00117.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-3713 · Nota de Segurança
• https://bugzilla.novell.com/show_bug.cgi?id=843230 · Nota