CVEvulnerability

CVE-2013-2207

2.6 LOW Published 2013-10-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-10-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.6 LOW — AV:L/AC:H/Au:N/C:P/I:P/A:N
Weaknesses
CWE-264

Description

pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.

Affected configurations

• gnu glibc (<= 2.17) • gnu glibc 2.0 • gnu glibc 2.0.1 • gnu glibc 2.0.2 • gnu glibc 2.0.3 • gnu glibc 2.0.4 • gnu glibc 2.0.5 • gnu glibc 2.0.6 • gnu glibc 2.1 • gnu glibc 2.1.1 • gnu glibc 2.1.1.6 • gnu glibc 2.1.2 • gnu glibc 2.1.3 • gnu glibc 2.1.9 • gnu glibc 2.10.1 • gnu glibc 2.11 • gnu glibc 2.11.1 • gnu glibc 2.11.2 • gnu glibc 2.11.3 • gnu glibc 2.12.1 • gnu glibc 2.12.2 • gnu glibc 2.13 • gnu glibc 2.14 • gnu glibc 2.14.1 • gnu glibc 2.15 • gnu glibc 2.16 • fedoraproject fedora 18 • fedoraproject fedora 19

Related

Weakness · not in database (1)

References