cve/2013/CVE-2013-1813.md

CVE-2013-1813

Description

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.

POC

Reference

• http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html
• http://seclists.org/fulldisclosure/2019/Jun/18
• http://seclists.org/fulldisclosure/2020/Aug/20
• http://seclists.org/fulldisclosure/2020/Mar/15
• https://seclists.org/bugtraq/2019/Jun/14

Github

No PoCs found on GitHub currently.