CVE-2013-2207

Published: Oct 9, 2013Modified: Apr 29, 2026

2.6

Vector

AV:L/AC:H/Au:N/C:P/I:P/A:N

Exploitability: 1.9 / Impact: 4.9

Source: NVD

Description

pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.

Affected (28)

Products: Gnu: Glibc · Fedoraproject: Fedora

1 product

1 product

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Gnu Glibc	Up to 2.17
Gnu Glibc	Version 2.0.1
Gnu Glibc	Version 2.0.2
Gnu Glibc	Version 2.0.3
Gnu Glibc	Version 2.0.4
Gnu Glibc	Version 2.0.5
Gnu Glibc	Version 2.0.6
Gnu Glibc	Version 2.0
Gnu Glibc	Version 2.1.1.6
Gnu Glibc	Version 2.1.1
Gnu Glibc	Version 2.1.2
Gnu Glibc	Version 2.1.3
Gnu Glibc	Version 2.1.9
Gnu Glibc	Version 2.10.1
Gnu Glibc	Version 2.11.1
Gnu Glibc	Version 2.11.2
Gnu Glibc	Version 2.11.3
Gnu Glibc	Version 2.11
Gnu Glibc	Version 2.12.1
Gnu Glibc	Version 2.12.2
Gnu Glibc	Version 2.13
Gnu Glibc	Version 2.14.1
Gnu Glibc	Version 2.14
Gnu Glibc	Version 2.15
Gnu Glibc	Version 2.16
Gnu Glibc	Version 2.1

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 18
Fedoraproject Fedora	Version 19

Related CWEs

References (20)

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html

Source: secalert@redhat.com

http://secunia.com/advisories/55113

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2013:283

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-2985-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-2985-2

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=976408

Source: secalert@redhat.com

Patch

https://security.gentoo.org/glsa/201503-04

Source: secalert@redhat.com

https://sourceware.org/bugzilla/show_bug.cgi?id=15755

Source: secalert@redhat.com

Patch

https://sourceware.org/ml/libc-alpha/2013-08/msg00160.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/55113

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:283

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2985-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2985-2

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=976408

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://security.gentoo.org/glsa/201503-04

Source: af854a3a-2127-422b-91ae-364da2661108

https://sourceware.org/bugzilla/show_bug.cgi?id=15755

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://sourceware.org/ml/libc-alpha/2013-08/msg00160.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.