{"id":"CVE-2013-1889","aliases":["EUVD-2013-1887","GHSA-hvmc-jwv7-mpp7","UBUNTU-CVE-2013-1889"],"status":"published","title":"mod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to...","description":"mod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to bypass security using a CGI script to break out of the chroot.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02165,"percentile":0.82369,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2019-11-08T15:07:10Z","modified":"2026-06-16T23:52:18Z","products":[{"vendor":"libapache2-mod-ruid2","product":"libapache2-mod-ruid2"},{"vendor":"mod_ruid2_project","product":"mod_ruid2"}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2013-1889","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2013/03/23/1","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/83035","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://sourceforge.net/p/mod-ruid/mailman/mod-ruid-announce/thread/514C503E.4020109%40users.sourceforge.net/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1889"},{"url":"https://sourceforge.net/p/mod-ruid/mailman/mod-ruid-announce/thread/514C503E.4020109@users.sourceforge.net/"},{"url":"https://github.com/advisories/GHSA-hvmc-jwv7-mpp7"},{"url":"https://ubuntu.com/security/CVE-2013-1889","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2013/03/22/5","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1889","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2013-1889","description":"mod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to bypass security using a CGI script to break out of the chroot.","status":"published","published":"2019-11-08T15:07:10Z","modified":"2024-08-06T15:20:37.077Z","updated_at":"2026-11-02T14:34:58.534075Z"}],"euvd":[{"id":"EUVD-2013-1887","description":"mod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to bypass security using a CGI script to break out of the chroot.","status":"published","published":"2019-11-08T15:07:10Z","modified":"2024-08-06T15:20:37Z","updated_at":"2026-11-03T01:56:40.540333Z"}],"ghsa":[{"id":"GHSA-hvmc-jwv7-mpp7","title":"mod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to...","description":"mod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to bypass security using a CGI script to break out of the chroot.","status":"published","published":"2022-05-05T00:29:02Z","modified":"2023-02-01T05:01:44Z","updated_at":"2026-11-02T14:49:46.769772Z"}],"nvd":[{"id":"CVE-2013-1889","description":"mod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to bypass security using a CGI script to break out of the chroot.","status":"published","published":"2019-11-08T16:15:10.45Z","modified":"2026-06-16T23:52:18.7Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:52.545039Z"}],"osv":[{"id":"UBUNTU-CVE-2013-1889","description":"mod_ruid2 before 0.9.8 improperly handles file descriptors which allows remote attackers to bypass security using a CGI script to break out of the chroot.","status":"withdrawn","published":"2019-11-08T16:15:00Z","modified":"2025-07-16T07:31:12.27725Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:06.854805Z"}]}}