CWE Code: 59
Vulnerability Type: privilege_escalation
CVSS Score: 2.4
CWE Name:  Improper Link Resolution Before File Access ('Link Following')
Summary: the daemonize.py module in subversion 1.8.0 before 1.8.2 allows local users to gain privileges via a symlink attack on the pid file created for (1) svnwcsub.py or (2) irkerbridge.py when the --pidfile option is used.  note: this issue was split from cve-2013-4262 based on different affected versions (adt3).
Access Authentication: SINGLE
Access Complexity: HIGH
Access Vector: LOCAL
Impact (C/I/A): NONE/PARTIAL/PARTIAL
Published Date: 2014-07-28
Last Modified Date: 2016-10-18