{"id":"CVE-2013-0219","aliases":["DEBIAN-CVE-2013-0219","EUVD-2013-0253","GHSA-6mv3-cv86-5f7j","MGASA-2013-0158","RHSA-2013:0508","RHSA-2013:1319","openSUSE-SU-2024:10427-1"],"status":"published","title":"System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3)...","description":"System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.","severity":{"version":"2.0","score":3.7,"vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00366,"percentile":0.30678,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2013-02-24T19:00:00Z","modified":"2026-11-07T11:00:02Z","fixes":[{"ecosystem":"Debian:12","package":"sssd","fixed_in":["1.8.4-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sssd","fixed_in":["1.8.4-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sssd","fixed_in":["1.8.4-2"],"sources":["osv"]},{"ecosystem":"Mageia:2","package":"sssd","fixed_in":["1.8.6-1.mga2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"libipa_hbac","fixed_in":["0:1.5.1-70.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"libipa_hbac-devel","fixed_in":["0:1.5.1-70.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"libipa_hbac-python","fixed_in":["0:1.5.1-70.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"sssd","fixed_in":["0:1.5.1-70.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"sssd-client","fixed_in":["0:1.5.1-70.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"sssd-debuginfo","fixed_in":["0:1.5.1-70.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"sssd-tools","fixed_in":["0:1.5.1-70.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"libipa_hbac","fixed_in":["0:1.5.1-70.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"libipa_hbac-devel","fixed_in":["0:1.5.1-70.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"libipa_hbac-python","fixed_in":["0:1.5.1-70.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"sssd","fixed_in":["0:1.5.1-70.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"sssd-client","fixed_in":["0:1.5.1-70.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"sssd-debuginfo","fixed_in":["0:1.5.1-70.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"sssd-tools","fixed_in":["0:1.5.1-70.el5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.4-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.4-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.4-2"}]}]},{"source":"osv","ecosystem":"Mageia:2","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6-1.mga2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libipa_hbac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libsss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libsss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libsss_sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"sssd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"sssd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libipa_hbac-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libsss_autofs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libsss_sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"sssd-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libipa_hbac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libsss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libsss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libsss_sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"sssd-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"sssd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"sssd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libipa_hbac-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libsss_autofs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libsss_sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libipa_hbac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libsss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libsss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libsss_sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"sssd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"sssd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libipa_hbac-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libsss_autofs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libsss_sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"sssd-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libipa_hbac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libsss_idmap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libsss_sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"sssd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"sssd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libipa_hbac-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libsss_autofs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libsss_idmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libsss_sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"sssd-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.2-82.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-70.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"libipa_hbac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-70.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"libipa_hbac-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-70.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-70.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"sssd-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-70.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"sssd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-70.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"sssd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-70.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"libipa_hbac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-70.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"libipa_hbac-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-70.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"libipa_hbac-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-70.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-70.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"sssd-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-70.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"sssd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-70.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"sssd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-70.el5"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-3.1"}]}],"bundled":6}],"products":[{"vendor":"fedoraproject","product":"sssd"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.4","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/51928","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098434.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0508.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://git.fedorahosted.org/cgit/sssd.git/commit/?id=94cbf1cfb0f88c967f1fb0a4cf23723148868e4a","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1319.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://git.fedorahosted.org/cgit/sssd.git/commit/?id=020bf88fd1c5bdac8fc671b37c7118f5378c7047","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/52315","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"https://fedorahosted.org/sssd/ticket/1782","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/57539","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://git.fedorahosted.org/cgit/sssd.git/commit/?id=3843b284cd3e8f88327772ebebc7249990fd87b9","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=884254","tags":["x_refsource_MISC","x_transferred","report"]},{"url":"http://git.fedorahosted.org/cgit/sssd.git/commit/?id=e864d914a44a37016736554e9257c06b18c57d37","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098613.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0219","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0508","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1319","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0219","tags":["report"]},{"url":"https://github.com/advisories/GHSA-6mv3-cv86-5f7j"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-0219","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2013-0158.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=9027","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.4_Technical_Notes/sssd.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=743505","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=761573","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=766000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=768165","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=768168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=789470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=789507","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=790105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=790107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=799009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=799928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=801431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=801719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=802718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=805920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=805921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=808307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=811987","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=813327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=814249","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=822404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=824244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=827036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=829740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=832103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=832120","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=845251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=845253","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=848547","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=852948","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=854619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=854997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=857047","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=860667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=861075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=861076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=861079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=861082","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=861091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=863131","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=866542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=867932","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=867933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=869013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=869071","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=869150","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=869443","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=869678","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=870039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=870045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=870060","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=870238","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=870278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=870280","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=870505","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=871160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=871576","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=871843","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=872110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=872180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=872324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=872683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=873032","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=873988","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=874579","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=874616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=874618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=874673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=875677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=875738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=875740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=875851","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=876531","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=877126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=877130","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=877354","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=877972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=877974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=878262","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=878419","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=878420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=878583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=880140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=880159","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=880176","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=880546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=880956","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=881773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=882076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=882221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=882290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=882923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=883336","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=883408","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=884480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=884600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=884601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=884666","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=885078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=885105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=886038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=886091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=886848","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=887961","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=888614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=888800","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=889168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=889182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=890520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=891356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=892197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=894302","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=894381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=894428","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=894738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=894997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=895132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=895615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=896476","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=902436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=902716","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0508.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0219","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0220","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0220","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0220","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=961680","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=974036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=979047","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1319.json","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0249","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-0219","description":"System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.","status":"published","published":"2013-02-24T19:00:00Z","modified":"2024-08-06T14:18:09.487Z","updated_at":"2026-11-02T14:34:59.222149Z"}],"euvd":[{"id":"EUVD-2013-0253","description":"System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.","status":"published","published":"2013-02-24T19:00:00Z","modified":"2024-08-06T14:18:09Z","updated_at":"2026-11-03T01:56:46.251982Z"}],"ghsa":[{"id":"GHSA-6mv3-cv86-5f7j","title":"System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3)...","description":"System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.","status":"published","published":"2022-05-05T02:48:35Z","modified":"2023-02-02T18:31:05Z","updated_at":"2026-11-02T14:52:47.451891Z"}],"nvd":[{"id":"CVE-2013-0219","description":"System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.","status":"published","published":"2013-02-24T19:55:01.237Z","modified":"2026-06-16T23:48:59.617Z","cvss":[{"version":"2.0","score":3.7,"vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:21.222658Z"}],"osv":[{"id":"CVE-2013-0219","description":"System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.","status":"published","published":"2013-02-24T19:55:01Z","modified":"2026-04-16T06:21:31.448340742Z","updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2013-0219","description":"System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows local users to create, modify, or delete arbitrary files via a symlink attack on another user's files.","status":"published","published":"2013-02-24T19:55:01.237Z","modified":"2026-11-07T11:00:02.861588897Z","updated_at":"2026-11-07T11:15:14.449016Z"},{"id":"MGASA-2013-0158","title":"Updated sssd packages fix security vulnerability","description":"A TOCTOU (time-of-check time-of-use) race condition was found in the way SSSD,\nSystem Security Services Daemon, performed copying and removal of (user)\ndirectory trees.A local attacker, with permissions to write into directory of\nthe victim, being actively / currently copied / removed via the sssd daemon\nfacility, could use this flaw to conduct symbolic link attacks, leading to\ntheir ability to alter / remove directories outside of originally intended, to\nbe modified, directory tree (CVE-2013-0219).\n","status":"published","published":"2013-06-06T12:24:33Z","modified":"2026-04-16T06:25:42.111139579Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"openSUSE-SU-2024:10427-1","title":"libipa_hbac-devel-1.14.2-3.1 on GA media","description":"These are all security issues fixed in the libipa_hbac-devel-1.14.2-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:51:16.083767Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2013:0508","title":"Red Hat Security Advisory: sssd security, bug fix and enhancement update","status":"published","published":"2024-09-15T20:17:34Z","modified":"2026-06-26T12:21:43.899076106Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2013:1319","title":"Red Hat Security Advisory: sssd security and bug fix update","status":"published","published":"2024-09-15T20:17:39Z","modified":"2026-06-26T10:22:19Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}