Vulnerability Description
ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1) tcp/tcp_connect.c, (2) server/eventscript.c, (3) tools/ctdb_diagnostics, (4) config/gdb_backtrace, and (5) include/ctdb_private.h.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ctdb Project | Ctdb | <= 2.2 |
| Opensuse | Opensuse | 12.3 |
| Mageia | Mageia | 3.0 |
Related Weaknesses (CWE)
References
- http://advisories.mageia.org/MGASA-2014-0274.html
- http://lists.opensuse.org/opensuse-updates/2014-06/msg00052.htmlVendor Advisory
- http://wiki.samba.org/index.php/CTDB2releaseNotes#ctdb_2.5
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:177
- http://www.openwall.com/lists/oss-security/2014/05/29/12
- https://bugzilla.redhat.com/show_bug.cgi?id=986773
- https://git.samba.org/?p=ctdb.git%3Ba=commitdiff%3Bh=b9b9f6738fba5c32e87cb9c36b3
- http://advisories.mageia.org/MGASA-2014-0274.html
- http://lists.opensuse.org/opensuse-updates/2014-06/msg00052.htmlVendor Advisory
- http://wiki.samba.org/index.php/CTDB2releaseNotes#ctdb_2.5
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:177
- http://www.openwall.com/lists/oss-security/2014/05/29/12
- https://bugzilla.redhat.com/show_bug.cgi?id=986773
- https://git.samba.org/?p=ctdb.git%3Ba=commitdiff%3Bh=b9b9f6738fba5c32e87cb9c36b3
FAQ
What is CVE-2013-4159?
CVE-2013-4159 is a vulnerability with a CVSS score of 7.5 (HIGH). ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1) tcp/tcp_connect.c, (2) server/eve...
How severe is CVE-2013-4159?
CVE-2013-4159 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-4159?
Check the references section above for vendor advisories and patch information. Affected products include: Ctdb Project Ctdb, Opensuse Opensuse, Mageia Mageia.