CVE-2013-4184

nvd nist

Published: Dec 10, 2019Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks

Affected (4)

Products: Data\: \ · Debian: Debian Linux

Data\

1 product

Debian

1 product

Debian Linux

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Data\ \	Before 1.224

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Related CWEs

CWE-59

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (23)

http://www.openwall.com/lists/oss-security/2013/07/31/4

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/61534

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://access.redhat.com/security/cve/cve-2013-4184

Source: secalert@redhat.com

Broken LinkThird Party Advisory

https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-4184

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-4184

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/86103

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3F2KOK2SM2LFI4BNFOVV2G2XVJQBIMZL/

Source: secalert@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DTKH3TWUOXBAAZST7364UVZ4UPH4CEO7/

Source: secalert@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MATNG5VP46SXJB2JHAI2LXPUXCYUOYPE/

Source: secalert@redhat.com

https://security-tracker.debian.org/tracker/CVE-2013-4184

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2013/07/31/4