VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 28, 2014· Updated May 6, 2026

CVE-2013-4262

CVE-2013-4262

Description

svnwcsub.py in Subversion 1.8.0 before 1.8.3, when using the --pidfile option and running in foreground mode, allows local users to gain privileges via a symlink attack on the pid file. NOTE: this issue was SPLIT due to different affected versions (ADT3). The irkerbridge.py issue is covered by CVE-2013-7393.

Affected products

3
  • Apache/Subversion3 versions
    cpe:2.3:a:apache:subversion:1.8.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:apache:subversion:1.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apache:subversion:1.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apache:subversion:1.8.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.