CVE-2013-1060

Ubuntu Linux - Privilege Escalation via perf Build Procedure HOME Environment Variable

Title source: llm
STIX 2.1

Description

A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME environment variable to the ~buildd directory and consequently reads the system configuration file from the ~buildd directory, which allows local users to gain privileges by leveraging control over the buildd account.

References (13)

Core 13
Core References
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1943-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1944-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1945-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1939-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1947-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1941-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1942-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1946-1
Various Sources x_refsource_confirm
https://launchpad.net/bugs/1206200
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1938-1
Various Sources mailing-list x_refsource_mlist
https://lists.ubuntu.com/archives/kernel-team/2013-July/031248.html
Various Sources mailing-list x_refsource_mlist
https://lists.ubuntu.com/archives/kernel-team/2013-July/031249.html

Scores

EPSS 0.0044
EPSS Percentile 35.8%

Details

CWE
CWE-264
Status published
Products (5)
canonical/ubuntu_linux 10.04
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 12.10
canonical/ubuntu_linux 13.04
canonical/ubuntu_linux 13.10
Published Sep 25, 2013
Tracked Since Feb 18, 2026