CVE-2013-1425

EUVD-2013-1463
ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
Affected Products (NVD)
VendorProductVersion
ldap_git_backup_projectldap_git_backup
𝑥
< 1.0.4
debiandebian_linux
8.0
debiandebian_linux
9.0
debiandebian_linux
10.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ldap-git-backup
bookworm
1.0.8-1.1
fixed
bullseye
1.0.8-1.1
fixed
sid
1.0.8-1.1
fixed
trixie
1.0.8-1.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ldap-git-backup
hardy
dne
lucid
dne
oneiric
dne
precise
dne
quantal
dne
raring
not-affected
Common Weakness Enumeration
References
https://github.com/elmar/ldap-git-backup/commit/a90f3217fce87962db82d212f73af70693087124
https://security-tracker.debian.org/tracker/CVE-2013-1425
https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1096253.html
https://github.com/elmar/ldap-git-backup/commit/a90f3217fce87962db82d212f73af70693087124
https://security-tracker.debian.org/tracker/CVE-2013-1425
https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1096253.html