2013-03-07

2013-03-08

2013-03-09

All (3) Critical (4) High (3) Medium (6)

CVE-2013-0249 HIGH POC THREAT Act Now

Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 44.2%.

Buffer Overflow Denial Of Service RCE Curl Libcurl +1

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

44.2%

Threat

4.3

CVE-2013-0261 HIGH This Week

(1) installer/basedefs.py and (2) modules/ospluginutils.py in PackStack allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation

NVD VulDB

CVSS 3.1

8.8

EPSS

0.1%

CVE-2013-1050 HIGH This Week

The default configuration in gnome-screensaver 3.5.4 through 3.6.0 sets the AutostartCondition line to fallback mode in the .desktop file, which prevents the program from starting automatically after. Rated high severity (CVSS 7.2), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Gnome Screensaver

NVD

CVSS 2.0

7.2

EPSS

0.1%