Insecure Permissions in BusyBox's mdev.c Vulnerability

CVE-2013-1813 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.