Vulnerability Description
virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments.
CVSS Score
7.2
HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Libvirt | 1.1.2 |
Related Weaknesses (CWE)
References
- http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=3e2f27e13b94f7302ad948bcacb
- http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=8c3586ea755c40d5e01b22cb7b5
- http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=b7fcc799ad5d8f3e55b89b94e59
- http://lists.fedoraproject.org/pipermail/package-announce/2013-November/121370.h
- http://secunia.com/advisories/60895
- http://security.gentoo.org/glsa/glsa-201412-04.xml
- http://wiki.libvirt.org/page/Maintenance_Releases
- https://bugzilla.redhat.com/show_bug.cgi?id=1015228Patch
- http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=3e2f27e13b94f7302ad948bcacb
- http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=8c3586ea755c40d5e01b22cb7b5
- http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=b7fcc799ad5d8f3e55b89b94e59
- http://lists.fedoraproject.org/pipermail/package-announce/2013-November/121370.h
- http://secunia.com/advisories/60895
- http://security.gentoo.org/glsa/glsa-201412-04.xml
- http://wiki.libvirt.org/page/Maintenance_Releases
FAQ
What is CVE-2013-4400?
CVE-2013-4400 is a vulnerability with a CVSS score of 7.2 (HIGH). virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments.
How severe is CVE-2013-4400?
CVE-2013-4400 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-4400?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Libvirt.