PT-2013-1495 · Suse · Inst-Source-Utils+2

Publicado 2012-11-22 · Atualizado 2018-10-30 · CVE-2012-0427

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions yast2-add-on-creator in SUSE inst-source-utils versions 2008.11.26 through 2008.11.26-0.9.0 yast2-add-on-creator in SUSE inst-source-utils versions 2012.9.13 through 2012.9.13-0.8.0

Description The issue allows local users to gain privileges via a crafted (1) file name or (2) directory name.

Recommendations For yast2-add-on-creator in SUSE inst-source-utils versions 2008.11.26 through 2008.11.26-0.9.0, update to version 2008.11.26-0.9.1 or later. For yast2-add-on-creator in SUSE inst-source-utils versions 2012.9.13 through 2012.9.13-0.8.0, update to version 2012.9.13-0.8.1 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-0427

SUSE-SU-2012_1529-1

Produtos afetados

Suse

Inst-Source-Utils

Yast2-Add-On-Creator

Referências · 11

• 🔥 https://bugzilla.novell.com/show_bug.cgi?id=604730 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-0427 · Nota de Segurança
• https://lists.suse.com/pipermail/sle-security-updates/2012-November/000304.html · Nota
• http://download.novell.com/patch/finder/?keywords=37a5722f1fdf0e2643b80548de09976b · Nota
• http://support.novell.com/security/cve/CVE-2012-0427.html · Nota
• http://download.novell.com/patch/finder/?keywords=f35a1b0dc8ef2c77aa295b221038b7af · Nota
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0427 · Nota de Segurança
• https://support.novell.com/security/cve/CVE-2012-0427.html · Aviso do Fabricante
• http://download.novell.com/Download?buildid=tGCXHQR48E4~ · Nota
• https://bugzilla.novell.com/604730 · Nota