CVE-2013-7393
The daemonize.py module in Subversion 1.8.0 before 1.8.2 allows local users to gain privileges...
The daemonize.py module in Subversion 1.8.0 before 1.8.2 allows local users to gain privileges via a symlink attack on the pid file created for (1) svnwcsub.py or (2) irkerbridge.py when the --pidfile option is used. NOTE: this issue was SPLIT from CVE-2013-4262 based on different affected versions (ADT3).
Exploit likelihood
What each source reports
NVD Score used
The daemonize.py module in Subversion 1.8.0 before 1.8.2 allows local users to gain privileges via a symlink attack on the pid file created for (1) svnwcsub.py or (2) irkerbridge.py when the --pidfile option is used. NOTE: this issue was SPLIT from CVE-2013-4262 based on different affected versions (ADT3).
- Record
CVE-2013-7393- CVSS 2.0
- 2.4 Low
AV:L/AC:H/Au:S/C:N/I:P/A:P - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
The daemonize.py module in Subversion 1.8.0 before 1.8.2 allows local users to gain privileges via a symlink attack on the pid file created for (1) svnwcsub.py or (2) irkerbridge.py when the --pidfile option is used. NOTE: this issue was SPLIT from CVE-2013-4262 based on different affected versions (ADT3).
- Record
CVE-2013-7393- Updated
- 2026-11-02
EUVDEUVD-2013-7159 No score
The daemonize.py module in Subversion 1.8.0 before 1.8.2 allows local users to gain privileges via a symlink attack on the pid file created for (1) svnwcsub.py or (2) irkerbridge.py when the --pidfile option is used. NOTE: this issue was SPLIT from CVE-2013-4262 based on different affected versions (ADT3).
- Record
EUVD-2013-7159- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vgr5-m78w-8rc3 No score
The daemonize.py module in Subversion 1.8.0 before 1.8.2 allows local users to gain privileges...
The daemonize.py module in Subversion 1.8.0 before 1.8.2 allows local users to gain privileges via a symlink attack on the pid file created for (1) svnwcsub.py or (2) irkerbridge.py when the --pidfile option is used. NOTE: this issue was SPLIT from CVE-2013-4262 based on different affected versions (ADT3).
- Record
GHSA-vgr5-m78w-8rc3- Weakness
- CWE-59
- Updated
- 2026-11-02
OSV No score
The daemonize.py module in Subversion 1.8.0 before 1.8.2 allows local users to gain privileges via a symlink attack on the pid file created for (1) svnwcsub.py or (2) irkerbridge.py when the --pidfile option is used. NOTE: this issue was SPLIT from CVE-2013-4262 based on different affected versions (ADT3).
- Record
CVE-2013-7393- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-7393 No score
The daemonize.py module in Subversion 1.8.0 before 1.8.2 allows local users to gain privileges via a symlink attack on the pid file created for (1) svnwcsub.py or (2) irkerbridge.py when the --pidfile option is used. NOTE: this issue was SPLIT from CVE-2013-4262 based on different affected versions (ADT3).
- Record
DEBIAN-CVE-2013-7393- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-7393 No score
The daemonize.py module in Subversion 1.8.0 before 1.8.2 allows local users to gain privileges via a symlink attack on the pid file created for (1) svnwcsub.py or (2) irkerbridge.py when the --pidfile option is used. NOTE: this issue was SPLIT from CVE-2013-4262 based on different affected versions (ADT3).
- Record
UBUNTU-CVE-2013-7393- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
subversionDebian:12 |
before 1.8.5-1 | 1.8.5-1 |
subversionDebian:13 |
before 1.8.5-1 | 1.8.5-1 |
subversionDebian:14 |
before 1.8.5-1 | 1.8.5-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-7393 is a low vulnerability (CVSS 2.4) in Apache Subversion, published July 28, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.55%, the 46th percentile. Fixed in subversion 1.8.5-1.
References
subversion.apache.org/security/CVE-2013-4262-advisory.txt
oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
nvd.nist.gov/vuln/detail/CVE-2013-7393
github.com/advisories/GHSA-vgr5-m78w-8rc3
security-tracker.debian.org/tracker/CVE-2013-7393
ubuntu.com/security/CVE-2013-7393
cve.org/CVERecord?id=CVE-2013-7393