CWE Code: 59
Vulnerability Type: privilege_escalation
CVSS Score: 2.4
CWE Name:  Improper Link Resolution Before File Access ('Link Following')
Summary: svnwcsub.py in subversion 1.8.0 before 1.8.3, when using the --pidfile option and running in foreground mode, allows local users to gain privileges via a symlink attack on the pid file.  note: this issue was split due to different affected versions (adt3). the irkerbridge.py issue is covered by cve-2013-7393.
Access Authentication: SINGLE
Access Complexity: HIGH
Access Vector: LOCAL
Impact (C/I/A): NONE/PARTIAL/PARTIAL
Published Date: 2014-07-28
Last Modified Date: 2016-10-18