VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 23, 2014· Updated Apr 29, 2026

CVE-2013-6412

CVE-2013-6412

Description

The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors.

Affected products

2
  • Augeas/Augeas2 versions
    cpe:2.3:a:augeas:augeas:1.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:augeas:augeas:1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:augeas:augeas:1.1.0:*:*:*:*:*:*:*

Patches

2
f5b4fc0c
https://github.com/hercules-team/augeasvia osv
commit
c3930fbd594f
https://github.com/hercules-team/augeasvia osv
PR #58

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

4

News mentions

0

No linked articles in our index yet.