{"id":"CVE-2013-0164","aliases":["EUVD-2013-0203","GHSA-pf6c-h3c9-qfmc","RHSA-2013:0220"],"status":"published","title":"The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin...","description":"The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.","severity":{"version":"2.0","score":3.6,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00365,"percentile":0.30567,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2013-02-24T22:00:00Z","modified":"2026-06-28T10:07:21Z","affected":[{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"rhc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-1.3.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"libmongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-6.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-6.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"mongodb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-6.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"mongodb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-6.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"mongodb-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-6.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"openshift-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.13-2.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"openshift-origin-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-1.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"openshift-origin-broker-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.14-1.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"ruby193-mod_passenger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.12-21.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"ruby193-rubygem-activerecord","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.8-2.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"ruby193-rubygem-activerecord-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.8-2.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"ruby193-rubygem-passenger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.12-21.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"ruby193-rubygem-passenger-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.12-21.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"ruby193-rubygem-passenger-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.12-21.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"ruby193-rubygem-passenger-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.12-21.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"ruby193-rubygem-passenger-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.12-21.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"ruby193-rubygem-passenger-native-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.12-21.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"rubygem-activerecord","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.13-3.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"rubygem-openshift-origin-auth-remote-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-2.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"rubygem-openshift-origin-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"rubygem-openshift-origin-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"rubygem-openshift-origin-console-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-1.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"rubygem-openshift-origin-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.11-1.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"rubygem-openshift-origin-dns-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"rubygem-openshift-origin-msg-broker-mcollective","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.498-1.1.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"openshift-origin-cartridge-haproxy-1.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-1.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"openshift-origin-cartridge-ruby-1.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-1.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"openshift-origin-cartridge-ruby-1.9-scl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-1.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"openshift-origin-msg-node-mcollective","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"openshift-origin-node-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-1.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"openshift-origin-port-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-1.el6op"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:openshift:1::el6","package":"rubygem-openshift-origin-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-6.el6op"}]}],"bundled":7}],"products":[{"vendor":"redhat","product":"openshift"},{"vendor":"redhat","product":"openshift_origin"}],"references":[{"url":"https://github.com/openshift/origin-server/commit/524465f70a32d0eb6bf047e6a05c76c22d52bfa2","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0220.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://github.com/openshift/origin-server/pull/1136","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=893307","tags":["x_refsource_MISC","x_transferred","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0164","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0220","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0164","tags":["report"]},{"url":"https://github.com/advisories/GHSA-pf6c-h3c9-qfmc"},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-01-04","tags":["article"]},{"url":"https://access.redhat.com/knowledge/docs/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=855264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=864921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=872415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=873765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=873768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=874511","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=874750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=874751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=874757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=874799","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=874845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=875657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=876324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=876465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=876644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=876937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=876939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=877158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=877407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=883527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=885587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=885598","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=886159","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=888043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=888056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=888671","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=889062","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=889088","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=889095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=889125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=889649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=890607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=890608","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=890612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=892781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=892795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=892990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=893288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=893895","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=896406","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0220.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-5658","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5658","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5658","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-6072","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6072","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6072","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-6073","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6073","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6073","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-6074","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6074","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6074","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-6496","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6496","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6496","tags":["advisory"]},{"url":"http://phenoelit.org/blog/archives/2012/12/21/let_me_github_that_for_you/index.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0158","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0158","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0158","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0164","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2013-0164","description":"The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.","status":"published","published":"2013-02-24T22:00:00Z","modified":"2024-08-06T14:18:09.219Z","updated_at":"2026-11-02T14:34:59.551717Z"}],"euvd":[{"id":"EUVD-2013-0203","description":"The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.","status":"published","published":"2013-02-24T22:00:00Z","modified":"2024-08-06T14:18:09Z","updated_at":"2026-11-03T01:56:46.251982Z"}],"ghsa":[{"id":"GHSA-pf6c-h3c9-qfmc","title":"The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin...","description":"The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.","status":"published","published":"2022-05-05T02:48:29Z","modified":"2023-02-10T05:06:36Z","updated_at":"2026-11-02T14:54:02.310741Z"}],"nvd":[{"id":"CVE-2013-0164","description":"The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.","status":"published","published":"2013-02-24T22:55:01.3Z","modified":"2026-06-16T23:48:53Z","cvss":[{"version":"2.0","score":3.6,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:21.222658Z"}],"osv":[{"id":"RHSA-2013:0220","title":"Red Hat Security Advisory: Red Hat OpenShift Enterprise 1.1 update","status":"published","published":"2024-09-15T20:30:43Z","modified":"2026-06-28T10:07:21Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}