NetSight
IP …
low3.7

CVE-2013-0219

System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, …

Impact

System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.

Affected products

VendorProductAffected versions
FedoraprojectSssd
through 1.9.3
Versions 0.2.1, 0.3.0, 0.3.1, 0.3.2, 0.3.3
RedhatEnterprise Linux
Versions 5, 6.0

Weakness classification

CWE-264

References