ByteOS Network

NVD Vulnerability Details :

CVE-2013-7393

Deferred

Source-cve@mitre.org

Published At-28 Jul, 2014 | 19:55

Updated At-12 Apr, 2025 | 10:46

The daemonize.py module in Subversion 1.8.0 before 1.8.2 allows local users to gain privileges via a symlink attack on the pid file created for (1) svnwcsub.py or (2) irkerbridge.py when the --pidfile option is used. NOTE: this issue was SPLIT from CVE-2013-4262 based on different affected versions (ADT3).

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	2.4	LOW	AV:L/AC:H/Au:S/C:N/I:P/A:P

Type: Primary

Version: 2.0

Base score: 2.4

Base severity: LOW

Vector:

AV:L/AC:H/Au:S/C:N/I:P/A:P

CPE Matches

The Apache Software Foundation

>>subversion>>1.8.0

cpe:2.3:a:apache:subversion:1.8.0:*:*:*:*:*:*:*

The Apache Software Foundation

>>subversion>>1.8.1

cpe:2.3:a:apache:subversion:1.8.1:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-59	Primary	nvd@nist.gov

CWE ID: CWE-59

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html	cve@mitre.org	N/A
https://subversion.apache.org/security/CVE-2013-4262-advisory.txt	cve@mitre.org	Vendor Advisory
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html	af854a3a-2127-422b-91ae-364da2661108	N/A
https://subversion.apache.org/security/CVE-2013-4262-advisory.txt	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory