CVE-2013-2176 Privilege escalation in n/a
Local attackers can gain privileges via a Trojan horse application exploiting an unquoted Windows search path in RHEV guest tools.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2013-2176?
CVE-2013-2176 is a high-severity vulnerability in n/a, published on 28 Aug 2013. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Unquoted Windows search path vulnerability in the Red Hat Enterprise Virtualization Application Provisioning Tool (RHEV-APT) in the rhev-guest-tools-iso package 3.2 allows local users to gain privileges via a Trojan horse application.
Weakness: CWE-399
Which versions are affected by CVE-2013-2176?
It affects 1 product.
Linux distribution packages (1)
rhev-guest-tools-iso Red Hat:rhev_manager:3 | All versions | 0:3.2-12 |
Products include Redhat Enterprise Virtualization.
How do I fix CVE-2013-2176?
Apply the vendor's patch.
Is CVE-2013-2176 being exploited?
There is no known exploitation of CVE-2013-2176 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-r66r-pgpw-cf3r, RHSA-2013:1122.