PT-2013-1513 · Red Hat+2 · Augeas+3

Vincent Danen · Publicado 2013-11-20 · Atualizado 2014-08-13 · CVE-2012-0786

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Augeas versions prior to 1.0.0

Description The issue allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file. This is due to a problem in the transform save function in transform.c.

Recommendations For versions prior to 1.0.0, update to version 1.0.0 or later to resolve the issue.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CESA-2013_1537

CVE-2012-0786

DLA-28-1

MGASA-2014-0058

OPENSUSE-SU-2024:10367-1

RHSA-2013:1537

RHSA-2013_1537

SUSE-SU-2014_1017-1

Produtos afetados

Augeas

Centos

Red Hat

Suse

Referências · 18

• https://github.com/hercules-team/augeas/commit/16387744 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=772257 · Nota
• https://linux.oracle.com/errata/ELSA-2013-1537.html · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2014-0058.html · Nota de Segurança
• http://secunia.com/advisories/55811 · Aviso do Fabricante
• http://augeas.net/news.html · Aviso do Fabricante
• https://rhn.redhat.com/errata/RHSA-2013-1537.html · Nota
• https://osv.dev/vulnerability/MGASA-2014-0058 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-0786 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2012-0786 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2012-0786 · Nota de Segurança
• http://rhn.redhat.com/errata/RHSA-2013-1537.html · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2012-0786 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-0786 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=11721 · Nota