Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

apache2: privilege escalation

Package(s):

apache2

CVE #(s):

CVE-2013-1048

Created:

March 5, 2013

Updated:

March 6, 2013

Description:

From the Debian advisory:

Hayawardh Vijayakumar noticed that the apache2ctl script created the lock directory in an unsafe manner, allowing a local attacker to gain elevated privileges via a symlink attack. This is a Debian specific issue.

Alerts:

Debian	DSA-2637-1	2013-03-04
Ubuntu	USN-1765-1	2013-03-18

(Log in to post comments)