CVE-2013-7458 : linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .r

linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file.

Published 2016-08-10 14:59:00

Updated 2018-08-08 13:49:17

Source Debian GNU/Linux

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2013-7458

Debian » Debian Linux » Version: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Matching versions
Redislabs » Redis
Versions up to, including, (<=) 3.2.2
cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2013-7458

Top countries where our scanners detected CVE-2013-7458

Top open port discovered on systems with this issue 6379

IPs affected by CVE-2013-7458 77

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2013-7458!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2013-7458

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2013-7458

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
3.3	LOW	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	1.8	1.4	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

CWE ids for CVE-2013-7458

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2013-7458

https://github.com/antirez/redis/pull/1418

fixed redis-cli security issue with world readable history file by georgenicolaou · Pull Request #1418 · antirez/redis · GitHub
Issue Tracking;Patch;Third Party Advisory
https://github.com/antirez/linenoise/pull/122

add funcion to save history in private file by denisvm · Pull Request #122 · antirez/linenoise · GitHub
Patch;Third Party Advisory
https://github.com/antirez/redis/pull/3322

Make history file private #3284 by denisvm · Pull Request #3322 · antirez/redis · GitHub
Patch;Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-08/msg00030.html

openSUSE-SU-2016:1981-1: moderate: Security update for redis
Mailing List;Third Party Advisory
http://www.debian.org/security/2016/dsa-3634

Debian -- Security Information -- DSA-3634-1 redis
Third Party Advisory
https://github.com/antirez/redis/blob/3.2/00-RELEASENOTES

redis/00-RELEASENOTES at 3.2 · antirez/redis · GitHub
Release Notes
https://github.com/antirez/linenoise/issues/121

Function to save history as private file by default · Issue #121 · antirez/linenoise · GitHub
Patch;Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=832460

#832460 - redis: CVE-2013-7458: world-readable .rediscli_history file - Debian Bug report logs
Mailing List;Third Party Advisory
https://github.com/antirez/redis/issues/3284

redis-cli: permissions when opening history file · Issue #3284 · antirez/redis · GitHub
Patch;Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-08/msg00029.html

openSUSE-SU-2016:1980-1: moderate: Security update for redis
Mailing List;Third Party Advisory