CVE-2013-0219
Fixed in a distro release EPSS <1%
System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.
Products: fedoraproject sssd, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sssd | 1.8.4-2 |
| Debian 13 | sssd | 1.8.4-2 |
| Red Hat Enterprise Linux 5 | libipa_hbac | 0:1.5.1-70.el5 |
| Red Hat Enterprise Linux 5 | libipa_hbac-devel | 0:1.5.1-70.el5 |
| Red Hat Enterprise Linux 5 | libipa_hbac-python | 0:1.5.1-70.el5 |
| Red Hat Enterprise Linux 5 | sssd | 0:1.5.1-70.el5 |
| Red Hat Enterprise Linux 5 | sssd-client | 0:1.5.1-70.el5 |
| Red Hat Enterprise Linux 5 | sssd-debuginfo | 0:1.5.1-70.el5 |
| Red Hat Enterprise Linux 5 | sssd-tools | 0:1.5.1-70.el5 |
| Red Hat Enterprise Linux 6 | libipa_hbac | 0:1.9.2-82.el6 |
| Red Hat Enterprise Linux 6 | libipa_hbac-devel | 0:1.9.2-82.el6 |
| Red Hat Enterprise Linux 6 | libipa_hbac-python | 0:1.9.2-82.el6 |
| Red Hat Enterprise Linux 6 | libsss_autofs | 0:1.9.2-82.el6 |
| Red Hat Enterprise Linux 6 | libsss_idmap | 0:1.9.2-82.el6 |
| Red Hat Enterprise Linux 6 | libsss_idmap-devel | 0:1.9.2-82.el6 |
| Red Hat Enterprise Linux 6 | libsss_sudo | 0:1.9.2-82.el6 |
| Red Hat Enterprise Linux 6 | libsss_sudo-devel | 0:1.9.2-82.el6 |
| Red Hat Enterprise Linux 6 | sssd | 0:1.9.2-82.el6 |
| Red Hat Enterprise Linux 6 | sssd-client | 0:1.9.2-82.el6 |
| Red Hat Enterprise Linux 6 | sssd-debuginfo | 0:1.9.2-82.el6 |
| Red Hat Enterprise Linux 6 | sssd-tools | 0:1.9.2-82.el6 |
| openSUSE Tumbleweed | sssd | 1.14.2-3.1 |