CVE-2012-1576

Опубликовано: 01 окт. 2012

Источник: nvd

CVSS2: 6

EPSS Низкий

Описание

The myuser_delete function in libathemecore/account.c in Atheme 5.x before 5.2.7, 6.x before 6.0.10, and 7.x before 7.0.0-beta2 does not properly clean up CertFP entries when a user is deleted, which allows remote attackers to access a different user account or cause a denial of service (daemon crash) via a login as a deleted user.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:atheme:atheme:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:6.0.3:*:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:6.0.4:*:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:6.0.5:*:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:6.0.6:*:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:6.0.7:*:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:6.0.8:*:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:6.0.9:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:atheme:atheme:7.0.0:*:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:7.0.0:alpha1:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:7.0.0:beta1:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:7.0.0:beta2:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:atheme:atheme:5.2.0:*:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:5.2.1:*:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:5.2.2:*:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:5.2.3:*:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:5.2.4:*:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:5.2.5:*:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:5.2.6:*:*:*:*:*:*:*

cpe:2.3:a:atheme:atheme:5.2.7:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01374

Низкий

6 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2012-1576

ubuntu

больше 13 лет назад

GHSA-rqr9-cc3p-3j3h

github

больше 3 лет назад

EPSS

Процентиль: 80%

0.01374

Низкий

6 Medium

CVSS2

Дефекты

CWE-264