cvelist/2023/4xxx/CVE-2023-4413.json

{
    "data_version": "4.0",
    "data_type": "CVE",
    "data_format": "MITRE",
    "CVE_data_meta": {
        "ID": "CVE-2023-4413",
        "ASSIGNER": "cna@vuldb.com",
        "STATE": "PUBLIC"
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "** DISPUTED ** A vulnerability was found in rkhunter Rootkit Hunter 1.4.4/1.4.6. It has been classified as problematic. Affected is an unknown function of the file /var/log/rkhunter.log. The manipulation leads to sensitive information in log files. An attack has to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The identifier of this vulnerability is VDB-237516. NOTE: Permission to access the file is limited to administrative users only by default."
            },
            {
                "lang": "deu",
                "value": "** DISPUTED ** Es wurde eine problematische Schwachstelle in rkhunter Rootkit Hunter 1.4.4/1.4.6 ausgemacht. Hiervon betroffen ist ein unbekannter Codeblock der Datei /var/log/rkhunter.log. Durch Manipulation mit unbekannten Daten kann eine sensitive information in log files-Schwachstelle ausgenutzt werden. Der Angriff hat dabei lokal zu erfolgen. Die Komplexit\u00e4t eines Angriffs ist eher hoch. Sie gilt als schwierig auszunutzen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung. Die wahre Existenz der vermeintlichen Schwachstelle wird zur Zeit in Frage gestellt."
            }
        ]
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "CWE-532 Sensitive Information in Log Files",
                        "cweId": "CWE-532"
                    }
                ]
            }
        ]
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "rkhunter",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "Rootkit Hunter",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_affected": "=",
                                            "version_value": "1.4.4"
                                        },
                                        {
                                            "version_affected": "=",
                                            "version_value": "1.4.6"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "references": {
        "reference_data": [
            {
                "url": "https://vuldb.com/?id.237516",
                "refsource": "MISC",
                "name": "https://vuldb.com/?id.237516"
            },
            {
                "url": "https://vuldb.com/?ctiid.237516",
                "refsource": "MISC",
                "name": "https://vuldb.com/?ctiid.237516"
            },
            {
                "url": "https://gist.github.com/MatheuZSecurity/16ef0219db8f85f49f945a25d5eb42d7",
                "refsource": "MISC",
                "name": "https://gist.github.com/MatheuZSecurity/16ef0219db8f85f49f945a25d5eb42d7"
            },
            {
                "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1051896",
                "refsource": "MISC",
                "name": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1051896"
            },
            {
                "url": "https://youtu.be/etHt1TNAgs8",
                "refsource": "MISC",
                "name": "https://youtu.be/etHt1TNAgs8"
            }
        ]
    },
    "credits": [
        {
            "lang": "en",
            "value": "matheuzsec (VulDB User)"
        }
    ],
    "impact": {
        "cvss": [
            {
                "version": "3.1",
                "baseScore": 2.5,
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
                "baseSeverity": "LOW"
            },
            {
                "version": "3.0",
                "baseScore": 2.5,
                "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
                "baseSeverity": "LOW"
            },
            {
                "version": "2.0",
                "baseScore": 1,
                "vectorString": "AV:L/AC:H/Au:S/C:P/I:N/A:N",
                "baseSeverity": "LOW"
            }
        ]
    }
}