CVE-2013-4159 ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1) tcp/tcp_connect.c, (2) server/eve...
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1) tcp/tcp_connect.c, (2) server/eventscript.c, (3) tools/ctdb_diagnostics, (4) config/gdb_backtrace, and (5) include/ctdb_private.h.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ctdb project ctdb | <= 2.2 | No fix listed |
| ctdb project ctdb | = 2.0 | No fix listed |
| ctdb project ctdb | = 2.1 | No fix listed |
| opensuse | = 12.3 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| mageia | = 3.0 | No fix listed |
| mageia | = 4.0 | No fix listed |
References
- advisories.mageia.org
- openSUSE-SU-2014:0842 vendor-advisory
- wiki.samba.org
- MDVSA-2015:177 vendor-advisory
- [oss-security] 20140529 CVE-2013-4159 ctdb: /tmp file vulnerability issues mailing-list
- bugzilla.redhat.com
- git.samba.org