CVE-2013-0162

Description

The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.

Risk Information

Base Score

8.6

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C

EPSS Score

Exploitation Probability

0.149

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2013-0162 are fixed in Ruby-ruby_parser 3.1.2	Windows
(RHSA-2013:0544) Important: Subscription Asset Manager 1.2 update apache-commons-codec-1.7-2.el6_3.x86_64.rpm	Linux
(RHSA-2013:0544) Important: Subscription Asset Manager 1.2 update apache-mime4j-0.6-4_redhat_1.ep6.el6.1.noarch.rpm	Linux
(RHSA-2013:0544) Important: Subscription Asset Manager 1.2 update apache-mime4j-javadoc-0.6-4_redhat_1.ep6.el6.1.noarch.rpm	Linux
(RHSA-2013:0544) Important: Subscription Asset Manager 1.2 update elasticsearch-0.19.9-5.el6_3.noarch.rpm	Linux
(RHSA-2013:0544) Important: Subscription Asset Manager 1.2 update katello-certs-tools-1.2.1-1h.el6_3.noarch.rpm	Linux
(RHSA-2013:0544) Important: Subscription Asset Manager 1.2 update katello-cli-1.2.1-12h.el6_3.noarch.rpm	Linux
(RHSA-2013:0544) Important: Subscription Asset Manager 1.2 update katello-cli-common-1.2.1-12h.el6_3.noarch.rpm	Linux
(RHSA-2013:0544) Important: Subscription Asset Manager 1.2 update katello-selinux-1.2.1-2h.el6_3.noarch.rpm	Linux
(RHSA-2013:0544) Important: Subscription Asset Manager 1.2 update lucene3-3.6.1-10h.el6_3.noarch.rpm	Linux
(RHSA-2013:0544) Important: Subscription Asset Manager 1.2 update lucene3-contrib-3.6.1-10h.el6_3.noarch.rpm	Linux
(RHSA-2013:0544) Important: Subscription Asset Manager 1.2 update quartz-2.1.5-4.el6_3.noarch.rpm	Linux
(RHSA-2013:0544) Important: Subscription Asset Manager 1.2 update rubygem-ldap_fluff-0.1.3-1.el6_3.noarch.rpm	Linux
(RHSA-2013:0544) Important: Subscription Asset Manager 1.2 update sigar-1.6.5-0.12.git58097d9h.el6_3.x86_64.rpm	Linux
(RHSA-2013:0544) Important: Subscription Asset Manager 1.2 update sigar-java-1.6.5-0.12.git58097d9h.el6_3.x86_64.rpm	Linux
(RHSA-2013:0544) Important: Subscription Asset Manager 1.2 update snappy-java-1.0.4-2.el6_3.x86_64.rpm	Linux
Vulnerabilities CVE-2013-0162 are fixed in Ruby-ruby_parser for Linux 3.1.2	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234