CVE-2013-4451

gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when creating (1) ~/.gitolite.rc, (2) ~/.gitolite, or (3) ~/repositories/gitolite-admin.git on fresh installs.

• CWE-264

• https://github.com/sitaramc/gitolite/commit/3dad4f8e3214d6ab5f71823019a624fa48b055a3Patch, Third Party Advisory
• https://groups.google.com/forum/#%21topic/gitolite/Tu1sjaf7A4A/discussion
• https://www.openwall.com/lists/oss-security/2013/10/21/11Mailing List, Patch
• https://www.securityfocus.com/bid/63237Third Party Advisory, VDB Entry
• https://github.com/sitaramc/gitolite/commit/3dad4f8e3214d6ab5f71823019a624fa48b055a3Patch, Third Party Advisory
• https://groups.google.com/forum/#%21topic/gitolite/Tu1sjaf7A4A/discussion
• https://www.openwall.com/lists/oss-security/2013/10/21/11Mailing List, Patch
• https://www.securityfocus.com/bid/63237Third Party Advisory, VDB Entry

Published

Sep 21, 2018

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4445The json rendering functionality in the Context module 6.x-2…
• CVE-2013-4446The _json_decode function in plugins/context_reaction_block.…
• CVE-2013-4447Cross-site scripting (XSS) vulnerability in the API in the S…
• CVE-2013-4448Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-4449The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does…
• CVE-2013-4450The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x b…
• CVE-2013-4452Red Hat JBoss Operations Network 3.1.2 uses world-readable p…
• CVE-2013-4453Cross-site scripting (XSS) vulnerability in templates/login.…
• CVE-2013-4454WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Secu…9.1
• CVE-2013-4455Katello Installer before 0.0.18 uses world-readable permissi…
• CVE-2013-4456Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-4457The Cocaine gem 0.4.0 through 0.5.2 for Ruby allows context-…