CVE-2013-6412 The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be....
MediumCVSS 4.6
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/augeas(Debian:12) | < 1.2.0-0.1 | 1.2.0-0.1 |
| debian/augeas(Debian:13) | < 1.2.0-0.1 | 1.2.0-0.1 |
| debian/augeas(Debian:14) | < 1.2.0-0.1 | 1.2.0-0.1 |
| augeas | = 1.0.0 | No fix listed |
| augeas | = 1.1.0 | No fix listed |
References
- Debian Security Tracker CVE-2013-6412 vendor-advisory
- RHSA-2014:0044 vendor-advisory
- bugzilla.redhat.com
- github.com
- github.com
- bugs.debian.org issue-tracking