Race condition in Luci 0.26.0 creates /var/lib/luci/etc... · CVE-2013-4481 · GitHub Advisory Database · GitHub

Race condition in Luci 0.26.0 creates /var/lib/luci/etc...

Low severity Unreviewed Published May 14, 2022 to the GitHub Advisory Database • Updated Feb 2, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive information such as "authentication secrets."

References

Published by the National Vulnerability Database

Nov 23, 2013

Published to the GitHub Advisory Database May 14, 2022

Last updated Feb 2, 2023