CVE-2013-7172

Published: Nov 21, 2019Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use RPATH information to execute arbitrary code with root privileges.

Affected (4)

Products: Slackware: Slackware Linux

Slackware

1 product

Slackware Linux

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Slackware Slackware Linux	Version 13.1
Slackware Slackware Linux	Version 13.37
Slackware Slackware Linux	Version 14.0
Slackware Slackware Linux	Version 14.1

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

http://www.openwall.com/lists/oss-security/2013/12/20/1

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7172

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/89916

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://security-tracker.debian.org/tracker/CVE-2013-7172

Source: cve@mitre.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2013/12/20/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7172

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/89916

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://security-tracker.debian.org/tracker/CVE-2013-7172

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.