Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-0878

Опубликовано: 01 мая 2012
Источник: nvd
CVSS2: 5.1
EPSS Низкий

Описание

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:pythonpaste:paste:*:*:*:*:*:*:*:*
Версия до 1.7.5 (включая)

EPSS

Процентиль: 78%
0.01239
Низкий

5.1 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu
больше 13 лет назад

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem.

redhat
больше 13 лет назад

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem.

debian
больше 13 лет назад

Paste Script 1.7.5 and earlier does not properly set group memberships ...

CVSS3: 6.5
github
около 3 лет назад

Paste Script has improper group memberships permissions

oracle-oval
почти 13 лет назад

ELSA-2012-1206: python-paste-script security update (MODERATE)

EPSS

Процентиль: 78%
0.01239
Низкий

5.1 Medium

CVSS2

Дефекты

CWE-264