Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-5638

Опубликовано: 20 дек. 2012
Источник: nvd
CVSS2: 3.6
EPSS Низкий

Описание

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ovirt:sanlock:-:*:*:*:*:*:*:*

EPSS

Процентиль: 12%
0.00041
Низкий

3.6 Low

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu
около 13 лет назад

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

redhat
больше 13 лет назад

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

debian
около 13 лет назад

The setup_logging function in log.h in SANLock uses world-writable per ...

github
больше 3 лет назад

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

EPSS

Процентиль: 12%
0.00041
Низкий

3.6 Low

CVSS2

Дефекты

CWE-264