CVE-2013-1813 Misconfiguration in n/a

High 7.2 Published 23 Nov 2013 Updated 6 Aug 2024

Local attackers can exploit insecure directory permissions in BusyBox mdev to potentially escalate privileges or modify system files.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2013-1813?

CVE-2013-1813 is a high-severity vulnerability in Redhat Enterprise Linux, published on 23 Nov 2013. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.

Weakness: CWE-264

Which versions are affected by CVE-2013-1813?

It affects 3 products.

Linux distribution packages (8)

`busybox` Red Hat:enterprise_linux:6::client	All versions	`1:1.15.1-20.el6`
`busybox-petitboot` Red Hat:enterprise_linux:6::client	All versions	`1:1.15.1-20.el6`
`busybox` Red Hat:enterprise_linux:6::computenode	All versions	`1:1.15.1-20.el6`
`busybox-petitboot` Red Hat:enterprise_linux:6::computenode	All versions	`1:1.15.1-20.el6`
`busybox` Red Hat:enterprise_linux:6::server	All versions	`1:1.15.1-20.el6`
`busybox-petitboot` Red Hat:enterprise_linux:6::server	All versions	`1:1.15.1-20.el6`
`busybox` Red Hat:enterprise_linux:6::workstation	All versions	`1:1.15.1-20.el6`
`busybox-petitboot` Red Hat:enterprise_linux:6::workstation	All versions	`1:1.15.1-20.el6`

Products include Busybox Busybox, Redhat Enterprise Linux, T-Mobile Tm-Ac1900.

How do I fix CVE-2013-1813?

Upgrade to a fixed version.

Is CVE-2013-1813 being exploited?

There is no known exploitation of CVE-2013-1813 in the wild and no public exploit code.

All Redhat Enterprise Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2013-1813, GHSA-gv44-p9m5-qjmr, MGASA-2013-0358, RHSA-2013:1732.