Vulnerability Description
The Debian apache2ctl script in the apache2 package squeeze before 2.2.16-6+squeeze11, wheezy before 2.2.22-13, and sid before 2.2.22-13 for the Apache HTTP Server on Debian GNU/Linux does not properly create the /var/lock/apache2 lock directory, which allows local users to gain privileges via an unspecified symlink attack.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian | Apache2 | <= 2.2.16-6 |
Related Weaknesses (CWE)
References
- http://security.debian.org/debian-security/pool/updates/main/a/apache2/apache2_2Patch
- http://www.debian.org/security/2013/dsa-2637Vendor Advisory
- http://security.debian.org/debian-security/pool/updates/main/a/apache2/apache2_2Patch
- http://www.debian.org/security/2013/dsa-2637Vendor Advisory
FAQ
What is CVE-2013-1048?
CVE-2013-1048 is a vulnerability with a CVSS score of 4.6 (MEDIUM). The Debian apache2ctl script in the apache2 package squeeze before 2.2.16-6+squeeze11, wheezy before 2.2.22-13, and sid before 2.2.22-13 for the Apache HTTP Server on Debian GNU/Linux does not properl...
How severe is CVE-2013-1048?
CVE-2013-1048 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-1048?
Check the references section above for vendor advisories and patch information. Affected products include: Debian Apache2.