Local File Manipulation Vulnerability in System Security Services Daemon
CVE-2013-0219

Currently unrated

Key Information:

Vendor: Fedoraproject
Status: Sssd
Vendor: CVE Published:; 24 February 2013

🔔 Create Fedoraproject Vulnerability Alert

What is CVE-2013-0219?

The System Security Services Daemon (SSSD) versions prior to 1.9.4 are vulnerable to a local file manipulation exploit that allows local users to create, modify, or delete arbitrary files. This is achieved through a symlink attack against another user's home directory. The vulnerability arises during operations such as creating, copying, or removing user home directory trees, posing significant risks to data integrity and system security.

References

https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.4

x_refsource_CONFIRM

http://secunia.com/advisories/51928

third-party-advisoryx_refsource_SECUNIA

http://lists.fedoraproject.org/pipermail/package-announce...

vendor-advisoryx_refsource_FEDORA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 24, 2013
Vulnerability Reserved
Dec 6, 2012