CVE-2013-7172

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-11-21 · updated 2026-06-17
Weakness: CWE-20

Description

Slackware 13.1, 13.37, 14.0 and 14.1 contain world-writable permissions on the iodbctest and iodbctestw programs within the libiodbc package, which could allow local users to use RPATH information to execute arbitrary code with root privileges.

Affected products

Slackware Linux: 13.1, 13.37, 14.0, 14.1

References

http://www.openwall.com/lists/oss-security/2013/12/20/1
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7172
https://exchange.xforce.ibmcloud.com/vulnerabilities/89916
https://security-tracker.debian.org/tracker/CVE-2013-7172
http://www.openwall.com/lists/oss-security/2013/12/20/1
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7172
https://exchange.xforce.ibmcloud.com/vulnerabilities/89916
https://security-tracker.debian.org/tracker/CVE-2013-7172

Get alerted when CVE-2013-7172 or the next vulnerability affects your stack