CVE-2013-4262 svnwcsub.py in Subversion 1.8.0 before 1.8.3, when using the --pidfile option and running in foreground mode, allows local users to gain privileges via a symlink attack on the pid file. NOTE: this iss...
LowCVSS 2.4
EPSS 0.61%
- Published
- Updated
- Exploit status
- No public exploit known
Description
svnwcsub.py in Subversion 1.8.0 before 1.8.3, when using the --pidfile option and running in foreground mode, allows local users to gain privileges via a symlink attack on the pid file. NOTE: this issue was SPLIT due to different affected versions (ADT3). The irkerbridge.py issue is covered by CVE-2013-7393.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/subversion(Debian:12) | < 1.8.5-1 | 1.8.5-1 |
| debian/subversion(Debian:13) | < 1.8.5-1 | 1.8.5-1 |
| debian/subversion(Debian:14) | < 1.8.5-1 | 1.8.5-1 |
| apache subversion | = 1.8.0 | No fix listed |
| apache subversion | = 1.8.1 | No fix listed |
| apache subversion | = 1.8.2 | No fix listed |
References
- Debian Security Tracker CVE-2013-4262 vendor-advisory
- www.oracle.com
- subversion.apache.org vendor-advisory