CVE ID:	CVE-2013-2007
Description:	The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.
Test IDs:	1.3.6.1.4.1.25623.1.1.10.2013.0169   1.3.6.1.4.1.25623.1.0.871005   1.3.6.1.4.1.25623.1.0.881744   1.3.6.1.4.1.25623.1.0.123614   1.3.6.1.4.1.25623.1.1.4.2015.0943.1   1.3.6.1.4.1.25623.1.1.4.2013.1923.1   1.3.6.1.4.1.25623.1.1.4.2013.1214.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-2007 1028521 http://www.securitytracker.com/id/1028521 53325 http://secunia.com/advisories/53325 59675 http://www.securityfocus.com/bid/59675 93032 http://osvdb.org/93032 RHSA-2013:0791 http://rhn.redhat.com/errata/RHSA-2013-0791.html RHSA-2013:0896 http://rhn.redhat.com/errata/RHSA-2013-0896.html [oss-security] 20130506 Xen Security Advisory 51 (CVE-2013-2007) - qemu guest agent (qga) insecure file permissions http://www.openwall.com/lists/oss-security/2013/05/06/5 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c689b4f1bac352dcfd6ecb9a1d45337de0f1de67 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c689b4f1bac352dcfd6ecb9a1d45337de0f1de67 https://bugzilla.redhat.com/show_bug.cgi?id=956082 https://bugzilla.redhat.com/show_bug.cgi?id=956082 openSUSE-SU-2013:1202 http://lists.opensuse.org/opensuse-updates/2013-07/msg00057.html qemu-cve20132007-priv-esc(84047) https://exchange.xforce.ibmcloud.com/vulnerabilities/84047