CVE-2013-6889 GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the --lint option.
MediumCVSS 4.9
EPSS 0.48%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the --lint option.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/rush(Debian:12) | < 1.7+dfsg-4 | 1.7+dfsg-4 |
| debian/rush(Debian:13) | < 1.7+dfsg-4 | 1.7+dfsg-4 |
| debian/rush(Debian:14) | < 1.7+dfsg-4 | 1.7+dfsg-4 |
| GNU rush | = 1.7 | No fix listed |
References
- Debian Security Tracker CVE-2013-6889 vendor-advisory
- git.gnu.org.ua
- bugs.debian.org exploit
- bugs.debian.org issue-tracking