Vulnerability Details : CVE-2013-4184
Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks
Products affected by CVE-2013-4184
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:a:data\:\:uuid_project:data\:\:uuid:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2013-4184
0.15%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 36 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-4184
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
3.6
|
LOW | AV:L/AC:L/Au:N/C:N/I:P/A:P |
3.9
|
4.9
|
NIST | |
|
5.5
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2013-4184
-
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-4184
-
http://www.securityfocus.com/bid/61534
CPAN Data::UUID Module Insecure Temporary File Handling VulnerabilityThird Party Advisory;VDB Entry
-
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-4184
Bug 832538 – VUL-1: CVE-2013-4184: perl-Data-UUID: symlink attacksIssue Tracking;Third Party Advisory
-
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DTKH3TWUOXBAAZST7364UVZ4UPH4CEO7/
[SECURITY] Fedora 39 Update: perl-Data-UUID-1.227-1.fc39 - package-announce - Fedora Mailing-Lists
-
http://www.openwall.com/lists/oss-security/2013/07/31/4
oss-security - Re: CVE Request: CPAN perl module Data::UUID symlink attacksMailing List;Third Party Advisory
-
https://access.redhat.com/security/cve/cve-2013-4184
Red Hat Customer PortalBroken Link;Third Party Advisory
-
https://security-tracker.debian.org/tracker/CVE-2013-4184
CVE-2013-4184Third Party Advisory
-
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MATNG5VP46SXJB2JHAI2LXPUXCYUOYPE/
[SECURITY] Fedora 38 Update: perl-Data-UUID-1.227-1.fc38 - package-announce - Fedora Mailing-Lists
-
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3F2KOK2SM2LFI4BNFOVV2G2XVJQBIMZL/
[SECURITY] Fedora 40 Update: perl-Data-UUID-1.227-1.fc40 - package-announce - Fedora Mailing-Lists
-
https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-4184
479370 – (CVE-2013-4184) dev-perl/Data-UUID: Symlink attacks (CVE-2013-4184)Third Party Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/86103
Data::UUID module for Perl files symlink CVE-2013-4184 Vulnerability ReportThird Party Advisory;VDB Entry
Jump to