Vulnerability Details CVE-2013-7171
Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on the /tmp directory which could allow remote attackers to execute arbitrary code with root privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.041
EPSS Ranking 87.9%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
- http://www.openwall.com/lists/oss-security/2013/12/20/1
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7171
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89915
- https://security-tracker.debian.org/tracker/CVE-2013-7171
- http://www.openwall.com/lists/oss-security/2013/12/20/1
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7171
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89915
- https://security-tracker.debian.org/tracker/CVE-2013-7171
Products affected by CVE-2013-7171
-
cpe:2.3:o:slackware:slackware_linux:14.0
-
cpe:2.3:o:slackware:slackware_linux:14.1