CVE-2013-7172

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use RPATH information to execute arbitrary code with root privileges.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2013/12/20/1Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7172Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/89916Third Party Advisory, VDB Entry
https://security-tracker.debian.org/tracker/CVE-2013-7172Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/12/20/1Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7172Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/89916Third Party Advisory, VDB Entry
https://security-tracker.debian.org/tracker/CVE-2013-7172Third Party Advisory

Timeline

Published: Nov 21, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2013