CVE-2013-1060
- State
- Published
- Severity
- Not scored
- Published
- Sep 25, 2013
- Updated
- Aug 6, 2024
- Reserved
- Jan 11, 2013
Description
A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME environment variable to the ~buildd directory and consequently reads the system configuration file from the ~buildd directory, which allows local users to gain privileges by leveraging control over the buildd account.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- USN-1943-1vendor-advisory
- USN-1938-1vendor-advisory
- USN-1944-1vendor-advisory
- USN-1945-1vendor-advisory
- https://launchpad.net/bugs/1206200
- [kernel-team] 20130731 [CVE-2013-1060] perf configuration file vunerabilitymailing-list
- USN-1939-1vendor-advisory
- [kernel-team] 20130731 [lucid CVE 1/1] UBUNTU: [Packaging] supply perf with appropriate prefix to ensure use of local configmailing-list
- USN-1947-1vendor-advisory
- http://people.canonical.com/~ubuntu-security/cve/2013/CVE-2013-1060.html
- USN-1941-1vendor-advisory
- USN-1942-1vendor-advisory
- USN-1946-1vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.