CVEvulnerability
CVE-2013-2007
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-05-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.
Affected configurations
• qemu qemu 1.4.1
Related
Weakness · not in database (1)
References
- http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c689b4f1bac352dcfd6ecb9a1d45337de0f1de67 git.qemu.org
- http://lists.opensuse.org/opensuse-updates/2013-07/msg00057.html lists.opensuse.org
- http://osvdb.org/93032 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2013-0791.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0896.html rhn.redhat.com
- http://secunia.com/advisories/53325 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2013/05/06/5 www.openwall.com
- http://www.securityfocus.com/bid/59675 www.securityfocus.com
- http://www.securitytracker.com/id/1028521 www.securitytracker.com
- https://bugzilla.redhat.com/show_bug.cgi?id=956082 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84047 exchange.xforce.ibmcloud.com
- http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c689b4f1bac352dcfd6ecb9a1d45337de0f1de67 git.qemu.org
- http://lists.opensuse.org/opensuse-updates/2013-07/msg00057.html lists.opensuse.org
- http://osvdb.org/93032 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2013-0791.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0896.html rhn.redhat.com
- http://secunia.com/advisories/53325 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2013/05/06/5 www.openwall.com
- http://www.securityfocus.com/bid/59675 www.securityfocus.com
- http://www.securitytracker.com/id/1028521 www.securitytracker.com
- https://bugzilla.redhat.com/show_bug.cgi?id=956082 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84047 exchange.xforce.ibmcloud.com