CVE-2013-3368 : Detail

CVE-2013-3368

0.04%V4
2013-08-23
16h00 +00:00
A01-Broken Access Control
Local
2024-09-17
00h55 +00:00
Notifikasi untuk CVE tertentu
Tetap terinformasi tentang perubahan untuk CVE tertentu.
Kelola notifikasi

Deskripsi CVE

bin/rt in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with predictable name.

Informasi CVE

Kelemahan Terkait

CWE-ID Nama Kelemahan Sumber
CWE-59 Improper Link Resolution Before File Access
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Metrik

Metrik Skor Tingkat keparahan CVSS Vektor Sumber
V2 3.3 AV:L/AC:M/Au:N/C:N/I:P/A:P nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

Produk yang Disebutkan

Konfigurasi 0

Bestpractical>>Rt >> Version 4.0.0

Bestpractical>>Rt >> Version 4.0.0

Bestpractical>>Rt >> Version 4.0.0

Bestpractical>>Rt >> Version 4.0.0

Bestpractical>>Rt >> Version 4.0.0

Bestpractical>>Rt >> Version 4.0.0

Bestpractical>>Rt >> Version 4.0.0

Bestpractical>>Rt >> Version 4.0.0

Bestpractical>>Rt >> Version 4.0.0

Bestpractical>>Rt >> Version 4.0.1

Bestpractical>>Rt >> Version 4.0.1

Bestpractical>>Rt >> Version 4.0.1

Bestpractical>>Rt >> Version 4.0.2

Bestpractical>>Rt >> Version 4.0.2

Bestpractical>>Rt >> Version 4.0.2

Bestpractical>>Rt >> Version 4.0.3

Bestpractical>>Rt >> Version 4.0.3

Bestpractical>>Rt >> Version 4.0.3

Bestpractical>>Rt >> Version 4.0.4

Bestpractical>>Rt >> Version 4.0.5

Bestpractical>>Rt >> Version 4.0.5

Bestpractical>>Rt >> Version 4.0.6

Bestpractical>>Rt >> Version 4.0.7

Bestpractical>>Rt >> Version 4.0.7

Bestpractical>>Rt >> Version 4.0.8

Bestpractical>>Rt >> Version 4.0.8

Bestpractical>>Rt >> Version 4.0.8

Bestpractical>>Rt >> Version 4.0.9

Bestpractical>>Rt >> Version 4.0.10

Bestpractical>>Rt >> Version 4.0.11

Bestpractical>>Rt >> Version 4.0.12

Konfigurasi 0

Bestpractical>>Rt >> Version 3.8.0

Bestpractical>>Rt >> Version 3.8.0

Bestpractical>>Rt >> Version 3.8.0

Bestpractical>>Rt >> Version 3.8.0

Bestpractical>>Rt >> Version 3.8.0

Bestpractical>>Rt >> Version 3.8.1

Bestpractical>>Rt >> Version 3.8.1

Bestpractical>>Rt >> Version 3.8.1

Bestpractical>>Rt >> Version 3.8.1

Bestpractical>>Rt >> Version 3.8.1

Bestpractical>>Rt >> Version 3.8.1

Bestpractical>>Rt >> Version 3.8.1

Bestpractical>>Rt >> Version 3.8.2

Bestpractical>>Rt >> Version 3.8.2

Bestpractical>>Rt >> Version 3.8.2

Bestpractical>>Rt >> Version 3.8.3

Bestpractical>>Rt >> Version 3.8.3

Bestpractical>>Rt >> Version 3.8.3

Bestpractical>>Rt >> Version 3.8.4

Bestpractical>>Rt >> Version 3.8.4

Bestpractical>>Rt >> Version 3.8.5

Bestpractical>>Rt >> Version 3.8.6

Bestpractical>>Rt >> Version 3.8.6

Bestpractical>>Rt >> Version 3.8.7

Bestpractical>>Rt >> Version 3.8.7

Bestpractical>>Rt >> Version 3.8.8

Bestpractical>>Rt >> Version 3.8.8

Bestpractical>>Rt >> Version 3.8.8

Bestpractical>>Rt >> Version 3.8.8

Bestpractical>>Rt >> Version 3.8.9

Bestpractical>>Rt >> Version 3.8.9

Bestpractical>>Rt >> Version 3.8.9

Bestpractical>>Rt >> Version 3.8.9

Bestpractical>>Rt >> Version 3.8.10

Bestpractical>>Rt >> Version 3.8.10

Bestpractical>>Rt >> Version 3.8.11

Bestpractical>>Rt >> Version 3.8.11

Bestpractical>>Rt >> Version 3.8.11

Bestpractical>>Rt >> Version 3.8.12

Bestpractical>>Rt >> Version 3.8.13

Bestpractical>>Rt >> Version 3.8.13

Bestpractical>>Rt >> Version 3.8.13

Bestpractical>>Rt >> Version 3.8.14

Bestpractical>>Rt >> Version 3.8.14

Bestpractical>>Rt >> Version 3.8.15

Bestpractical>>Rt >> Version 3.8.16

Referensi

http://www.osvdb.org/93612
Tags : vdb-entry, x_refsource_OSVDB
http://secunia.com/advisories/53505
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.debian.org/security/2012/dsa-2670
Tags : vendor-advisory, x_refsource_DEBIAN
http://secunia.com/advisories/53522
Tags : third-party-advisory, x_refsource_SECUNIA