Gitolite Multiple Insecure File Permissions Vulnerabilities
BID:63237
CVE-2013-4451 |Info
Gitolite Multiple Insecure File Permissions Vulnerabilities
| Bugtraq ID: | 63237 |
| Class: | Design Error |
| CVE: |
CVE-2013-4451 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 21 2013 12:00AM |
| Updated: | Oct 23 2013 12:36AM |
| Credit: | Nathan Ferch |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Gitolite Multiple Insecure File Permissions Vulnerabilities
Gitolite is prone to multiple insecure file-permission vulnerabilities.
A local attacker can exploit these issues to overwrite certain files with arbitrary data. This may lead to privilege escalation; other attacks may also be possible.
Gitolite is prone to multiple insecure file-permission vulnerabilities.
A local attacker can exploit these issues to overwrite certain files with arbitrary data. This may lead to privilege escalation; other attacks may also be possible.
Exploit / POC
Gitolite Multiple Insecure File Permissions Vulnerabilities
Attackers require local interactive access to exploit these issues.
Attackers require local interactive access to exploit these issues.
Solution / Fix
Gitolite Multiple Insecure File Permissions Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Gitolite Multiple Insecure File Permissions Vulnerabilities
References:
References:
- Gitolite Homepage (Gitolite)