CVE-2013-2007

Qemu 1.4.1 - Unprotected File Permissions in Guest Agent Daemon Mode

Title source: llm
STIX 2.1

Description

The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.

References (11)

Core 11
Core References
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2013-07/msg00057.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/93032
Issue Tracking x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=956082
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1028521
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/59675
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/05/06/5
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/53325
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/84047
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-0791.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-0896.html

Scores

EPSS 0.0007
EPSS Percentile 21.1%

Details

CWE
CWE-264
Status published
Products (1)
qemu/qemu 1.4.1
Published May 21, 2013
Tracked Since Feb 18, 2026