CVE-2013-1060

A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME…

published September 25, 2013

CVSS
—
EPSS
0%
Percentile
37.3
In the wild
Unconfirmed
What it is

A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME environment variable to the ~buildd directory and consequently reads the system configuration file from the ~buildd directory, which allows local users to gain privileges by leveraging control over the buildd account.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00441 · 37.3th percentile
Published
2013-09-25T10:00Z
EPSS history
Timeline
  • 25 SEP 10:00Z
    A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME…
    cvelistv5