CVE-2013-1090: High severity openSUSE openSUSE vulnerability
The SUSE horde5 package before 5.0.2-2.4.1 sets incorrect ownership for certain configuration files and directories including /etc/apache2/vhosts.d, which allows local wwwrun users to gain privileges via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1090?
CVE-2013-1090 is considered to be of medium severity due to improper ownership settings allowing privilege escalation for local users.
How do I fix CVE-2013-1090?
To fix CVE-2013-1090, ensure that the ownership and permissions of the affected configuration files and directories are properly set for security.
Who is affected by CVE-2013-1090?
The vulnerability affects users of the SUSE horde5 package prior to version 5.0.2-2.4.1 on openSUSE 12.3.
What are the risks associated with CVE-2013-1090?
The risks associated with CVE-2013-1090 include potential privilege escalation in a local environment, allowing unauthorized actions by wwwrun users.
Can CVE-2013-1090 be exploited remotely?
CVE-2013-1090 is primarily a local privilege escalation vulnerability and does not involve remote exploitation.