CVE-2013-0219: Race Condition

Published Dec 5, 2012
·
Updated

A TOCTOU (time-of-check time-of-use) race condition was found in the way SSSD, System Security Services Daemon, performed copying and removal of (user) directory trees.A local attacker, with permissions to write into directory of the victim, being actively / currently copied / removed via the sssd daemon facility, could use this flaw to conduct symbolic link attacks, leading to their ability to alter / remove directories outside of originally intended, to be modified, directory tree.

This issue was found by Florian Weimer of Red Hat Product Security Team.

Other sources

System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.

MITRE

Affected Software

78 affected components
Fedoraproject Sssd<=1.9.3
Fedoraproject Sssd=0.2.1
Fedoraproject Sssd=0.3.0
Fedoraproject Sssd=0.3.1
Fedoraproject Sssd=0.3.2
Fedoraproject Sssd=0.3.3
Fedoraproject Sssd=0.4.0
Fedoraproject Sssd=0.4.1
Fedoraproject Sssd=0.5.0
Fedoraproject Sssd=0.6.0
Fedoraproject Sssd=0.6.1
Fedoraproject Sssd=0.7.0
Fedoraproject Sssd=0.7.1
Fedoraproject Sssd=0.99.0
Fedoraproject Sssd=0.99.1
Fedoraproject Sssd=1.0.0
Fedoraproject Sssd=1.0.1
Fedoraproject Sssd=1.0.2
Fedoraproject Sssd=1.0.3
Fedoraproject Sssd=1.0.4
Fedoraproject Sssd=1.0.5
Fedoraproject Sssd=1.0.6
Fedoraproject Sssd=1.0.99
Fedoraproject Sssd=1.1.0
Fedoraproject Sssd=1.1.1
Fedoraproject Sssd=1.1.2
Fedoraproject Sssd=1.1.91
Fedoraproject Sssd=1.1.92
Fedoraproject Sssd=1.2.0
Fedoraproject Sssd=1.2.1
Fedoraproject Sssd=1.2.2
Fedoraproject Sssd=1.2.3
Fedoraproject Sssd=1.2.4
Fedoraproject Sssd=1.2.91
Fedoraproject Sssd=1.3.0
Fedoraproject Sssd=1.3.1
Fedoraproject Sssd=1.4.0
Fedoraproject Sssd=1.4.1
Fedoraproject Sssd=1.5.0
Fedoraproject Sssd=1.5.1
Fedoraproject Sssd=1.5.2
Fedoraproject Sssd=1.5.3
Fedoraproject Sssd=1.5.4
Fedoraproject Sssd=1.5.5
Fedoraproject Sssd=1.5.6
Fedoraproject Sssd=1.5.6.1
Fedoraproject Sssd=1.5.7
Fedoraproject Sssd=1.5.8
Fedoraproject Sssd=1.5.9
Fedoraproject Sssd=1.5.10
Fedoraproject Sssd=1.5.11
Fedoraproject Sssd=1.5.12
Fedoraproject Sssd=1.5.13
Fedoraproject Sssd=1.5.14
Fedoraproject Sssd=1.5.15
Fedoraproject Sssd=1.5.16
Fedoraproject Sssd=1.5.17
Fedoraproject Sssd=1.6.0
Fedoraproject Sssd=1.6.1
Fedoraproject Sssd=1.6.2
Fedoraproject Sssd=1.6.3
Fedoraproject Sssd=1.6.4
Fedoraproject Sssd=1.7.0
Fedoraproject Sssd=1.8.0
Fedoraproject Sssd=1.8.0-beta1
Fedoraproject Sssd=1.8.0-beta2
Fedoraproject Sssd=1.8.0-beta3
Fedoraproject Sssd=1.8.1
Fedoraproject Sssd=1.8.2
Fedoraproject Sssd=1.8.3
Fedoraproject Sssd=1.8.4
Fedoraproject Sssd=1.8.5
Fedoraproject Sssd=1.8.6
Fedoraproject Sssd=1.9.0
Fedoraproject Sssd=1.9.1
Fedoraproject Sssd=1.9.2
redhat Enterprise Linux=5
redhat Enterprise Linux=6.0

Event History

Dec 5, 2012
Data Sourced
06:16 PM
DescriptionSeverityAffected Software
Feb 24, 2013
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2013-0219?

CVE-2013-0219 has been assigned a high severity rating due to its potential to allow local attackers unauthorized access to user directory trees.

2

How do I fix CVE-2013-0219?

To fix CVE-2013-0219, update to the latest version of SSSD that addresses this vulnerability.

3

What versions of SSSD are affected by CVE-2013-0219?

CVE-2013-0219 affects multiple versions of SSSD, primarily versions prior to 1.9.4.

4

Can I exploit CVE-2013-0219 remotely?

CVE-2013-0219 is a local vulnerability, meaning it cannot be exploited remotely as it requires local permissions.

5

What is a TOCTOU race condition in CVE-2013-0219?

A TOCTOU (Time of Check To Time of Use) race condition in CVE-2013-0219 occurs when an attacker modifies a user directory during a copy or removal process.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203