Описание
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenStack Platform 3 | augeas | Affected | ||
| Red Hat Enterprise Linux 6 | augeas | Fixed | RHSA-2013:1537 | 20.11.2013 |
| Red Hat Storage 3 for RHEL 6 | augeas | Fixed | RHSA-2013:1537 | 20.11.2013 |
| RHEV 3.X Hypervisor and Agents for RHEL-6 | augeas | Fixed | RHSA-2013:1537 | 20.11.2013 |
Показывать по
Дополнительная информация
Статус:
3.3 Low
CVSS2
Связанные уязвимости
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.
The transform_save function in transform.c in Augeas before 1.0.0 allo ...
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.
ELSA-2013-1537: augeas security, bug fix, and enhancement update (LOW)
3.3 Low
CVSS2