CVE-2013-4392

systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files.

Score

CVSS 3.1 5.0 Medium

Status

Modified - secalert@redhat.com

Published

2013-10-28

Last modified

2025-06-09

Weaknesses

CWE-59

Affected products

• Systemd (Systemd Project)

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357
• http://www.openwall.com/lists/oss-security/2013/10/01/9
• https://bugzilla.redhat.com/show_bug.cgi?id=859060