CVE-2013-5364

Name of the Vulnerable Software and Affected Versions Secunia CSI Agent versions 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, 7.0.0.21 and earlier

Description The issue allows local users to modify the configuration of the CSI Agent by changing the permissions of the /etc/csia config.xml file, which has world-readable and world-writable permissions when running on Red Hat Linux.

Recommendations For versions 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, and 7.0.0.21 and earlier, consider changing the permissions of the /etc/csia config.xml file to prevent local users from modifying the CSI Agent configuration. Restrict write access to the /etc/csia config.xml file to minimize the risk of exploitation.