CVE-2013-1813
util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when...
util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.
Exploit likelihood
What each source reports
NVD Score used
util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.
- Record
CVE-2013-1813- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.
- Record
CVE-2013-1813- Updated
- 2026-11-02
EUVDEUVD-2013-1833 No score
util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.
- Record
EUVD-2013-1833- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gv44-p9m5-qjmr No score
util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when...
util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.
- Record
GHSA-gv44-p9m5-qjmr- Updated
- 2026-11-02
OSV No score
util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.
- Record
CVE-2013-1813- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-1813 No score
util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.
- Record
DEBIAN-CVE-2013-1813- Updated
- 2026-11-02
OSVMGASA-2013-0358 No score
Updated busybox package fixes security vulnerability
It was found that the mdev BusyBox utility could create certain directories within /dev with world-writable permissions. A local unprivileged user could use this flaw to manipulate portions of the /dev directory tree (CVE-2013-1813).
- Record
MGASA-2013-0358- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-1813 No score
util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.
- Record
UBUNTU-CVE-2013-1813- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
busyboxDebian:12 |
before 1:1.20.0-8 | 1:1.20.0-8 |
busyboxDebian:13 |
before 1:1.20.0-8 | 1:1.20.0-8 |
busyboxDebian:14 |
before 1:1.20.0-8 | 1:1.20.0-8 |
busyboxMageia:3 |
before 1.20.2-2.1.mga3 | 1.20.2-2.1.mga3 |
busyboxRed Hat:enterprise_linux:6::client |
before 1:1.15.1-20.el6 | 1:1.15.1-20.el6 |
busybox-petitbootRed Hat:enterprise_linux:6::client |
before 1:1.15.1-20.el6 | 1:1.15.1-20.el6 |
busyboxRed Hat:enterprise_linux:6::computenode |
before 1:1.15.1-20.el6 | 1:1.15.1-20.el6 |
busybox-petitbootRed Hat:enterprise_linux:6::computenode |
before 1:1.15.1-20.el6 | 1:1.15.1-20.el6 |
busyboxRed Hat:enterprise_linux:6::server |
before 1:1.15.1-20.el6 | 1:1.15.1-20.el6 |
busybox-petitbootRed Hat:enterprise_linux:6::server |
before 1:1.15.1-20.el6 | 1:1.15.1-20.el6 |
busyboxRed Hat:enterprise_linux:6::workstation |
before 1:1.15.1-20.el6 | 1:1.15.1-20.el6 |
busybox-petitbootRed Hat:enterprise_linux:6::workstation |
before 1:1.15.1-20.el6 | 1:1.15.1-20.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-1813 is a high vulnerability (CVSS 7.2) in Busybox, published November 23, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.62%, the 50th percentile. Fixed in busybox 1:1.20.0-8.
References
support.t-mobile.com/docs/DOC-21994
bugs.debian.org/cgi-bin/bugreport.cgi?bug=701965
rhn.redhat.com/errata/RHSA-2013-1732.html
lists.busybox.net/pipermail/busybox/2013-January/078864.html
git.busybox.net/busybox/commit?id=4609f477c7e043a4f6147dfe6e86b775da2ef784
seclists.org/fulldisclosure/2019/Jun/18
Show 18 moreShow less
packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html
nvd.nist.gov/vuln/detail/CVE-2013-1813
github.com/advisories/GHSA-gv44-p9m5-qjmr
security-tracker.debian.org/tracker/CVE-2013-1813
advisories.mageia.org/MGASA-2013-0358.html
bugs.mageia.org/show_bug.cgi?id=11722
access.redhat.com/errata/RHSA-2013:1732
bugzilla.redhat.com/show_bug.cgi?id=820097
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1732.json
cve.org/CVERecord?id=CVE-2013-1813
ubuntu.com/security/CVE-2013-1813
openwall.com/lists/oss-security/2013/03/03/9