PT-2019-7009 · Slackware · Libiodbc

Publicado 2019-11-21 · Atualizado 2019-12-03 · CVE-2013-7172

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Slackware versions 13.1, 13.37, 14.0, 14.1

Description The issue concerns world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package. This could allow local users to use RPATH information to execute arbitrary code with root privileges.

Recommendations For Slackware versions 13.1, 13.37, 14.0, 14.1, consider changing the permissions of the iodbctest and iodbctestw programs to prevent world-writable access until a patch is available. As a temporary workaround, restrict the use of the libiodbc package to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-7172

Produtos afetados

Libiodbc

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/89916 · Nota
• https://security-tracker.debian.org/tracker/CVE-2013-7172 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-7172 · Nota de Segurança
• http://openwall.com/lists/oss-security/2013/12/20/1 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7172 · Nota