PT-2012-4727 · None · Extplorer

Andreas Beckmann + 1 · Publicado 2012-08-07 · Atualizado 2012-08-08 · CVE-2012-3454

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions eXtplorer version 2.1.0b6

Description The issue concerns the use of world-writable permissions for the /var/lib/extplorer/ftp tmp directory. This setup allows local users to delete or overwrite arbitrary files.

Recommendations For version 2.1.0b6, change the permissions of the /var/lib/extplorer/ftp tmp directory to prevent world-writable access, restricting write permissions to only the necessary users or groups.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-3454

Produtos afetados

Extplorer

Referências · 7

• http://securityfocus.com/bid/54801 · Nota
• https://ubuntu.com/security/CVE-2012-3454 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3454 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-3454 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2012-3454 · Nota de Segurança
• http://openwall.com/lists/oss-security/2012/08/03/7 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-3454 · Nota de Segurança