CVE-2013-5364: Low severity secunia csi agent vulnerability
Secunia CSI Agent 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, and 7.0.0.21 and earlier, when running on Red Hat Linux, uses world-readable and world-writable permissions for /etc/csiaconfig.xml, which allows local users to change CSI Agent configuration by modifying this file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5364?
CVE-2013-5364 is considered a medium severity vulnerability due to the potential for local users to modify configuration files.
How do I fix CVE-2013-5364?
To fix CVE-2013-5364, you should change the permissions of the /etc/csia_config.xml file to restrict access to only authorized users.
What software is affected by CVE-2013-5364?
CVE-2013-5364 affects Secunia CSI Agent versions 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, and 7.0.0.21 and earlier when running on Red Hat Linux.
Can a local user exploit CVE-2013-5364?
Yes, a local user can exploit CVE-2013-5364 by modifying the world-readable and world-writable configuration file to alter the CSI Agent's behavior.
What is the impact of CVE-2013-5364?
The impact of CVE-2013-5364 includes unauthorized changes to the Secunia CSI Agent configuration, potentially leading to security issues.