PT-2019-6869 · Autojump+1 · Autojump+1

Zbigniew Jędrzejewski-Szmek · Publicado 2014-07-05 · Atualizado 2020-08-18 · CVE-2013-2012

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Média

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions autojump versions prior to 21.5.8

Description The issue allows local users to gain privileges via a Trojan horse custom install directory in the current working directory.

Recommendations For versions prior to 21.5.8, update to version 21.5.8 or later to resolve the issue.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

ALT-PU-2014-1897

CVE-2013-2012

Produtos afetados

Alt Linux

Autojump

Referências · 10

• https://github.com/wting/autojump/commit/c763b2afadb188ab52849c21d43d2e8fe5b8800a · Correção
• https://github.com/wting/autojump/commit/ad09ee27d402be797b3456abff6edeb4291edfec · Correção
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2012 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83827 · Nota
• https://packages.altlinux.org/ru/vuln/CVE-2013-2012 · Nota
• https://errata.altlinux.org/ALT-PU-2014-1897 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-2012 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2012 · Nota
• http://openwall.com/lists/oss-security/2013/04/25/14 · Nota
• https://security-tracker.debian.org/tracker/CVE-2013-2012 · Aviso do Fabricante