CVE-2013-4400

Published: 9 December 2013

virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments.

Notes

introduced in 1.1.2

Status

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1015228#c3
• https://www.cve.org/CVERecord?id=CVE-2013-4400
• NVD
• Launchpad
• Debian

Bugs

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=727101
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4400