[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2013-4419":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":18,"cwes":19,"cpes":21,"technologies":25,"references":29,"score":35,"epss_score":36,"epss_percentile":37,"is_kev":18,"cisa_kev_date_added":38,"cisa_kev_due_date":38,"cisa_ssvc":39,"attack_mappings":45,"exploits":46},167952,"CVE-2013-4419","EUVD-2013-4296","The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of \u002Ftmp\u002F.guestfish-$UID\u002F when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating \u002Ftmp\u002F.guestfish-$UID\u002F in advance.","2013-11-05T20:55:00Z",{"cvss_v2.0":10},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",6.8,"ADJACENT_NETWORK","AV:A\u002FAC:H\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","NONE","COMPLETE","HIGH",false,[20],"CWE-264",[22,23,24],"cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:11.0:sp3:*:*:*:*:*:*","cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:*:*:*:*","cpe:2.3:a:libguestfs:libguestfs:*:*:*:*:*:*:*:*",[26,27,28],"Novell Suse Linux Enterprise Server","Libguestfs Libguestfs","Suse Suse Linux Enterprise Software Development Kit",[30,31,32,33,34],"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2013-11\u002Fmsg00001.html","http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2013-1536.html","http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F55813","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1016960","https:\u002F\u002Fwww.redhat.com\u002Farchives\u002Flibguestfs\u002F2013-October\u002Fmsg00031.html",0.34,0.00754,0.54649,null,{"timestamp":38,"automatable":40,"tech_impact":41,"exploitation":42,"cisa_decision":43,"cisa_remediation_timeline":44},"no","partial","none",{},"FSU",[],[]]