CVE-2012-0786

Опубликовано: 23 нояб. 2013

Источник: nvd

CVSS2: 3.3

EPSS Низкий

Описание

The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:augeas:augeas:*:*:*:*:*:*:*:*

Версия до 0.10.0 (включая)

cpe:2.3:a:augeas:augeas:0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.0.3:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.0.4:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.0.5:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.0.6:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.0.7:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.0.8:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.1.0:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.2.0:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.2.1:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.2.2:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.3.0:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.3.1:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.3.2:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.3.3:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.3.4:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.3.5:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.3.6:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.4.0:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.4.1:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.4.2:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.5.0:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.5.1:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.5.2:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.5.3:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.6.0:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.7.0:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.7.1:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.7.2:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.7.3:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.7.4:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.8.0:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.8.1:*:*:*:*:*:*:*

cpe:2.3:a:augeas:augeas:0.9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 2%

0.00015

Низкий

3.3 Low

CVSS2

Дефекты

CWE-59

Связанные уязвимости

CVE-2012-0786

ubuntu

почти 12 лет назад

The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.

CVE-2012-0786

redhat

около 13 лет назад

The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.

CVE-2012-0786

debian

почти 12 лет назад

The transform_save function in transform.c in Augeas before 1.0.0 allo ...

GHSA-v2f6-mg42-536m

github

больше 3 лет назад

The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.

ELSA-2013-1537

oracle-oval

больше 11 лет назад

ELSA-2013-1537: augeas security, bug fix, and enhancement update (LOW)

EPSS

Процентиль: 2%

0.00015

Низкий

3.3 Low

CVSS2

Дефекты

CWE-59