CVE-2013-4262

high

Description

svnwcsub.py in Subversion 1.8.0 before 1.8.3, when using the --pidfile option and running in foreground mode, allows local users to gain privileges via a symlink attack on the pid file. NOTE: this issue was SPLIT due to different affected versions (ADT3). The irkerbridge.py issue is covered by CVE-2013-7393.

References

https://subversion.apache.org/security/CVE-2013-4262-advisory.txt

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

Details

Source: Mitre, NVD

Published: 2014-07-28

Updated: 2016-10-18

Risk Information

CVSS v2

Base Score: 2.4

Vector: CVSS2#AV:L/AC:H/Au:S/C:N/I:P/A:P

Severity: Low

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High