CVE-2013-4392

MEDIUM

systemd < 239 - Symlink Attack via File Permission Update

Title source: llm

Description

systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files.

References (3)

Core 3

Core References

Issue Tracking, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=859060

Issue Tracking, Third Party Advisory x_refsource_confirm

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2013/10/01/9

Scores

CVSS v3 5.0

EPSS 0.0047

EPSS Percentile 37.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-59

Status published

Products (1)

systemd_project/systemd < 239

Published Oct 28, 2013

Tracked Since Feb 18, 2026