Unscored severity · published Oct 9, 2013
CVE-2013-2207
pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and…
–
CVSS
0.4%
EPSS
No
On KEV
Description
pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FE
Fedora · Fedoraproject
18; 19 · source: NVD
GL
Glibc · Gnu
through 2.17; 2.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; +20 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2207
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2207
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html
secunia.com
http://secunia.com/advisories/55113
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2013:283
www.ubuntu.com
http://www.ubuntu.com/usn/USN-2985-1
www.ubuntu.com
http://www.ubuntu.com/usn/USN-2985-2
More from Fedora
10.0
CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
10.0
CVE-2015-3306
ProFTPD Improper Access Control Vulnerability
9.8
CVE-2024-4577
Argument Injection in PHP-CGI
9.8
CVE-2021-44026
Roundcube Webmail SQL Injection Vulnerability
9.8
CVE-2021-42013
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)