CVE-2013-7172: Input Validation
Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use RPATH information to execute arbitrary code with root privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7172?
The severity of CVE-2013-7172 is high with a severity value of 7.8.
What is the vulnerability description of CVE-2013-7172?
CVE-2013-7172 is a vulnerability in Slackware Linux that allows local users to execute arbitrary code with root privileges by exploiting world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package.
How can local users exploit CVE-2013-7172?
Local users can exploit CVE-2013-7172 by using RPATH information to execute arbitrary code with root privileges.
Which versions of Slackware Linux are affected by CVE-2013-7172?
Slackware Linux versions 13.1, 13.37, 14.0, and 14.1 are affected by CVE-2013-7172.
How can I fix CVE-2013-7172?
To fix CVE-2013-7172, users should update the libiodbc package to version 3.52.9-2.1, 3.52.9-3, or 3.52.9-4.