Home > Vulnerability Database > CVE-2013-4400

Mend Vulnerability Database

New vulnerability? Tell us about it!

CVE-2013-4400

Good to know:

Date: December 9, 2013

virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments.

Language: C

Severity Score

8.4

Related Resources (5)

Url: http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=b7fcc799ad5d8f3e55b89b94e599903e3c092467

Url: https://bugzilla.redhat.com/show_bug.cgi?id=1015228

Url: http://wiki.libvirt.org/page/Maintenance_Releases

Url: https://nvd.nist.gov/vuln/detail/CVE-2013-4400

Url: https://www.mend.io/vulnerability-database/CVE-2013-4400

Severity Score

8.4

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

Top Fix

Upgrade Version

CVSS v3.1

Base Score:	8.4
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	7.2
Access Vector (AV):	LOCAL
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Do you need more information?

Contact Us