Red Hat Security AdvisoryRHSA-2013:1732
busybox security and bug fix update
Released 2013-11-20 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) busybox-1:1.15.1-20.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) busybox-1:1.15.1-20.el6, busybox-petitboot-1:1.15.1-20.el6
- Red Hat Enterprise Linux HPC Node (v. 6) busybox-1:1.15.1-20.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) busybox-1:1.15.1-20.el6, busybox-petitboot-1:1.15.1-20.el6
- Red Hat Enterprise Linux Server (v. 6) busybox-1:1.15.1-20.el6
- Red Hat Enterprise Linux Server Optional (v. 6) busybox-1:1.15.1-20.el6, busybox-petitboot-1:1.15.1-20.el6
- Red Hat Enterprise Linux Workstation (v. 6) busybox-1:1.15.1-20.el6
- Red Hat Enterprise Linux Workstation Optional (v. 6) busybox-1:1.15.1-20.el6, busybox-petitboot-1:1.15.1-20.el6
Fixes 1 record
Priority LOW 33
util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00623 · Published 2013-11-23 · Fixed CWE-264
