CVE-2013-4159
ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has...
ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1) tcp/tcp_connect.c, (2) server/eventscript.c, (3) tools/ctdb_diagnostics, (4) config/gdb_backtrace, and (5) include/ctdb_private.h.
Exploit likelihood
What each source reports
NVD Score used
ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1) tcp/tcp_connect.c, (2) server/eventscript.c, (3) tools/ctdb_diagnostics, (4) config/gdb_backtrace, and (5) include/ctdb_private.h.
- Record
CVE-2013-4159- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1) tcp/tcp_connect.c, (2) server/eventscript.c, (3) tools/ctdb_diagnostics, (4) config/gdb_backtrace, and (5) include/ctdb_private.h.
- Record
CVE-2013-4159- Updated
- 2026-11-02
EUVDEUVD-2013-4084No score
ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1) tcp/tcp_connect.c, (2) server/eventscript.c, (3) tools/ctdb_diagnostics, (4) config/gdb_backtrace, and (5) include/ctdb_private.h.
- Record
EUVD-2013-4084- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4pj4-x8fv-v6vmNo score
ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has...
ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1) tcp/tcp_connect.c, (2) server/eventscript.c, (3) tools/ctdb_diagnostics, (4) config/gdb_backtrace, and (5) include/ctdb_private.h.
- Record
GHSA-4pj4-x8fv-v6vm- Updated
- 2026-11-02
OSVMGASA-2014-0274No score
Updated ctdb package fixes CVE-2013-4159
Updated ctdb packages fix security vulnerability:
ctdb before 2.5 is vulnerable to symlink attacks to due the use of predictable filenames in /tmp, such as /tmp/ctdb.socket (CVE-2013-4159).
- Record
MGASA-2014-0274- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-4159No score
ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1) tcp/tcp_connect.c, (2) server/eventscript.c, (3) tools/ctdb_diagnostics, (4) config/gdb_backtrace, and (5) include/ctdb_private.h.
- Record
UBUNTU-CVE-2013-4159- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-4159 is a high vulnerability (CVSS 7.5) in Ctdb Project Ctdb, published June 27, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.37%, the 84th percentile. Fixed in ctdb 1.2.46-3.1.mga3.
References
bugzilla.redhat.com/show_bug.cgi?id=986773
mandriva.com/security/advisories?name=MDVSA-2015:177
lists.opensuse.org/opensuse-updates/2014-06/msg00052.html
openwall.com/lists/oss-security/2014/05/29/12
advisories.mageia.org/MGASA-2014-0274.html
wiki.samba.org/index.php/CTDB2releaseNotes
Show 7 moreShow less
git.samba.org?p=ctdb.git%3Ba=commitdiff%3Bh=b9b9f6738fba5c32e87cb9c36b358355b444fb9b
nvd.nist.gov/vuln/detail/CVE-2013-4159
github.com/advisories/GHSA-4pj4-x8fv-v6vm
bugs.mageia.org/show_bug.cgi?id=13455
ubuntu.com/security/CVE-2013-4159
cve.org/CVERecord?id=CVE-2013-4159