CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-4419

The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 23.6%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2013-4419

Libguestfs » Libguestfs » Version: 1.20.0

cpe:2.3:a:libguestfs:libguestfs:1.20.0
Libguestfs » Libguestfs » Version: 1.20.1

cpe:2.3:a:libguestfs:libguestfs:1.20.1
Libguestfs » Libguestfs » Version: 1.20.10

cpe:2.3:a:libguestfs:libguestfs:1.20.10
Libguestfs » Libguestfs » Version: 1.20.11

cpe:2.3:a:libguestfs:libguestfs:1.20.11
Libguestfs » Libguestfs » Version: 1.20.12

cpe:2.3:a:libguestfs:libguestfs:1.20.12
Libguestfs » Libguestfs » Version: 1.20.2

cpe:2.3:a:libguestfs:libguestfs:1.20.2
Libguestfs » Libguestfs » Version: 1.20.3

cpe:2.3:a:libguestfs:libguestfs:1.20.3
Libguestfs » Libguestfs » Version: 1.20.4

cpe:2.3:a:libguestfs:libguestfs:1.20.4
Libguestfs » Libguestfs » Version: 1.20.5

cpe:2.3:a:libguestfs:libguestfs:1.20.5
Libguestfs » Libguestfs » Version: 1.20.6

cpe:2.3:a:libguestfs:libguestfs:1.20.6
Libguestfs » Libguestfs » Version: 1.20.7

cpe:2.3:a:libguestfs:libguestfs:1.20.7
Libguestfs » Libguestfs » Version: 1.20.8

cpe:2.3:a:libguestfs:libguestfs:1.20.8
Libguestfs » Libguestfs » Version: 1.20.9

cpe:2.3:a:libguestfs:libguestfs:1.20.9
Libguestfs » Libguestfs » Version: 1.22.0

cpe:2.3:a:libguestfs:libguestfs:1.22.0
Libguestfs » Libguestfs » Version: 1.22.1

cpe:2.3:a:libguestfs:libguestfs:1.22.1
Libguestfs » Libguestfs » Version: 1.22.2

cpe:2.3:a:libguestfs:libguestfs:1.22.2
Libguestfs » Libguestfs » Version: 1.22.3

cpe:2.3:a:libguestfs:libguestfs:1.22.3
Libguestfs » Libguestfs » Version: 1.22.4

cpe:2.3:a:libguestfs:libguestfs:1.22.4
Libguestfs » Libguestfs » Version: 1.22.5

cpe:2.3:a:libguestfs:libguestfs:1.22.5
Libguestfs » Libguestfs » Version: 1.22.6

cpe:2.3:a:libguestfs:libguestfs:1.22.6
Libguestfs » Libguestfs » Version: 1.22.7

cpe:2.3:a:libguestfs:libguestfs:1.22.7
Suse » Suse Linux Enterprise Software Development Kit » Version: 11.0

cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:11.0
Novell » Suse Linux Enterprise Server » Version: 11.0

cpe:2.3:o:novell:suse_linux_enterprise_server:11.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-4419

Products

Pricing

Contact Us