← Back

CVE-2013-1813

nvd nist
Published: Nov 23, 2013Modified: Apr 29, 2026

JSON object

Loading...
7.2
Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 3.9 / Impact: 10.0
Source: NVD

Description

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.

Affected (101)

1 product
Enterprise Linux
1 product
Tm Ac1900
1 product
Busybox
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 6.0
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 3.0.0.4.376_3169
Configuration C
99 vulnerable
Vulnerable SoftwareAffected Versions
Busybox
Up to 1.20.2
Version 0.38
Version 0.39
Version 0.40
Version 0.41
Version 0.42
Version 0.43
Version 0.45
Version 0.46
Version 0.47
Version 0.48
Version 0.49
Version 0.50
Version 0.51
Version 0.52
Version 0.60.0
Version 0.60.1
Version 0.60.2
Version 0.60.3
Version 0.60.4
Version 0.60.5
Version 1.00
Version 1.01
Version 1.1.0
Version 1.1.1
Version 1.1.2
Version 1.1.3
Version 1.10.0
Version 1.10.1
Version 1.10.2
Version 1.10.3
Version 1.10.4
Version 1.11.0
Version 1.11.1
Version 1.11.2
Version 1.11.3
Version 1.12.0
Version 1.12.1
Version 1.12.2
Version 1.12.3
Version 1.12.4
Version 1.13.0
Version 1.13.1
Version 1.13.2
Version 1.13.3
Version 1.13.4
Version 1.14.0
Version 1.14.1
Version 1.14.2
Version 1.14.3
Version 1.14.4
Version 1.15.0
Version 1.15.1
Version 1.15.2
Version 1.15.3
Version 1.16.0
Version 1.16.1
Version 1.16.2
Version 1.17.0
Version 1.17.1
Version 1.17.2
Version 1.17.3
Version 1.17.4
Version 1.18.0
Version 1.18.1
Version 1.18.2
Version 1.18.3
Version 1.18.4
Version 1.18.5
Version 1.19.0
Version 1.19.2
Version 1.19.3
Version 1.19.4
Version 1.2.0
Version 1.2.1
Version 1.2.2.1
Version 1.2.2
Version 1.20.0
Version 1.20.1
Version 1.3.0
Version 1.3.1
Version 1.3.2
Version 1.4.0
Version 1.4.1
Version 1.4.2
Version 1.5.0
Version 1.5.1
Version 1.6.0
Version 1.6.1
Version 1.7.0
Version 1.7.1
Version 1.7.2
Version 1.7.3
Version 1.8.0
Version 1.8.1
Version 1.8.2
Version 1.9.0
Version 1.9.1
Version 1.9.2

Related CWEs

References (20)

Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.