CVE-2013-4482

Untrusted search path vulnerability in python-paste-script (aka paster) in Luci 0.26.0, when...

6.2 MediumFix available

CVE-2013-4482 is a medium vulnerability (CVSS 6.2) in Scientificlinux Luci, published November 23, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in luci 0:0.26.0-48.el6.

Untrusted search path vulnerability in python-paste-script (aka paster) in Luci 0.26.0, when started using the initscript, allows local users to gain privileges via a Trojan horse .egg-info file in the (1) current working directory or (2) its parent directories.

Exploit likelihood

0.38%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 6.2

Record: CVE-2013-4482
CVSS 2.0: 6.2 MediumAV:L/AC:H/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Record: CVE-2013-4482
Updated: 2026-11-02

EUVDEUVD-2013-4347 No score

Record: EUVD-2013-4347
Updated: 2026-11-03

GitHub AdvisoriesGHSA-f585-5p5j-mvf8 No score

Untrusted search path vulnerability in python-paste-script (aka paster) in Luci 0.26.0, when...

Record: GHSA-f585-5p5j-mvf8
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`luci` Red Hat:enterprise_linux:6::server	before 0:0.26.0-48.el6	0:0.26.0-48.el6
`luci-debuginfo` Red Hat:enterprise_linux:6::server	before 0:0.26.0-48.el6	0:0.26.0-48.el6

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 16 moreShow less