PT-2014-2704 · Opensuse · Aaa Base+1

Published 2014-01-11 · Updated 2018-10-30 · CVE-2013-3713

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions aaa base versions prior to 16.26.1

Description The issue in the image creation configuration allows local users to obtain sensitive information and possibly have other unspecified impacts by reading /etc/shadow, as demonstrated in openSUSE 13.1 KDE when installing from a live image.

Recommendations For versions prior to 16.26.1, update to version 16.26.1 or later to resolve the issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-3713

Affected Products

Aaa Base

Opensuse

References · 3

• 🔥 http://lists.opensuse.org/opensuse-updates/2013-12/msg00117.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-3713 · Security Note
• https://bugzilla.novell.com/show_bug.cgi?id=843230 · Note