CVE-2013-2007

Published: May 21, 2013Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.

Affected (1)

Products: Qemu: Qemu

Qemu

1 product

Qemu

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Qemu Qemu	Version 1.4.1

Related CWEs

CWE-264

References (22)

http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c689b4f1bac352dcfd6ecb9a1d45337de0f1de67

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-07/msg00057.html

Source: secalert@redhat.com

http://osvdb.org/93032

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-0791.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-0896.html

Source: secalert@redhat.com

http://secunia.com/advisories/53325

Source: secalert@redhat.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2013/05/06/5

Source: secalert@redhat.com

http://www.securityfocus.com/bid/59675

Source: secalert@redhat.com

http://www.securitytracker.com/id/1028521

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=956082

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/84047

Source: secalert@redhat.com

http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c689b4f1bac352dcfd6ecb9a1d45337de0f1de67