ISOMAN

CVE

CVE-2013-7172

Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use RPATH information to execute arbitrary code with root privileges.

Severity
HIGH
CVSS
7.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Slackware13.1 x86 install-d1unknownsource
Slackware13.1 x86 install-d2unknownsource
Slackware13.1 x86 install-d3unknownsource
Slackware13.1 x86 install-dvdunknownsource
Slackware13.1 x86 source-d4unknownsource
Slackware13.1 x86 source-d5unknownsource
Slackware13.1 x86 source-d6unknownsource
Slackware13.37 x86 install-d1unknownsource
Slackware13.37 x86 install-d2unknownsource
Slackware13.37 x86 install-d3unknownsource
Slackware13.37 x86 install-d4unknownsource
Slackware13.37 x86 install-dvdunknownsource
Slackware13.37 x86 source-d5unknownsource
Slackware13.37 x86 source-d6unknownsource
Slackware14.0 x86 install-d1unknownsource
Slackware14.0 x86 install-d2unknownsource
Slackware14.0 x86 install-d3unknownsource
Slackware14.0 x86 install-d4unknownsource
Slackware14.0 x86 install-dvdunknownsource
Slackware14.0 x86 source-d5unknownsource
Slackware14.0 x86 source-d6unknownsource
Slackware14.0 x86 source-dvdunknownsource
Slackware14.1 x86 install-d1unknownsource
Slackware14.1 x86 install-d2unknownsource
Slackware14.1 x86 install-d3unknownsource
Slackware14.1 x86 install-d4unknownsource
Slackware14.1 x86 install-dvdunknownsource
Slackware14.1 x86 source-d5unknownsource
Slackware14.1 x86 source-d6unknownsource
Slackware14.1 x86 source-dvdunknownsource
Slackware13.1 x86_64 install-dvdunknownsource
Slackware13.37 x86_64 install-dvdunknownsource
Slackware14.0 x86_64 install-dvdunknownsource
Slackware14.1 x86_64 install-dvdunknownsource

References

  1. http://www.openwall.com/lists/oss-security/2013/12/20/1
  2. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7172
  3. https://exchange.xforce.ibmcloud.com/vulnerabilities/89916
  4. https://security-tracker.debian.org/tracker/CVE-2013-7172
  5. http://www.openwall.com/lists/oss-security/2013/12/20/1
  6. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7172
  7. https://exchange.xforce.ibmcloud.com/vulnerabilities/89916
  8. https://security-tracker.debian.org/tracker/CVE-2013-7172