PT-2019-7008 · Slackware+1 · Slackware+1

Murray Mcallister · Publicado 2019-11-21 · Atualizado 2019-12-03 · CVE-2013-7171

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Slackware versions 14.0 through 14.1 Slackware LLVM versions 3.0-i486-2 through 3.3-i486-2

Description The issue allows remote attackers to execute arbitrary code with root privileges due to world-writable permissions on the /tmp directory.

Recommendations For Slackware versions 14.0 through 14.1, change the permissions of the /tmp directory to prevent world-writable access. For Slackware LLVM versions 3.0-i486-2 through 3.3-i486-2, modify the permissions of the /tmp directory to restrict unauthorized access.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-7171

Produtos afetados

Llvm

Slackware

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/89915 · Nota
• https://security-tracker.debian.org/tracker/CVE-2013-7171 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7171 · Nota
• http://openwall.com/lists/oss-security/2013/12/20/1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-7171 · Nota de Segurança