PT-2019-6802 · Netbsd · Isearch

David Holland · Publicado 2019-12-30 · Atualizado 2020-01-10 · CVE-2012-5663

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions isearch versions prior to 1.47.01nb1

Description The issue concerns the creation of insecure temporary files in a publicly-writable area, specifically /tmp, due to the use of the tempnam() function.

Recommendations For versions prior to 1.47.01nb1, update to version 1.47.01nb1 or later to resolve the issue.

Exploit

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-459

CWE-269

Identificadores relacionados

CVE-2012-5663

Produtos afetados

Isearch

Referências · 7

• 🔥 http://openwall.com/lists/oss-security/2012/12/21/2 · Exploit
• http://openwall.com/lists/oss-security/2012/12/21/3 · Nota
• https://t.me/cibsecurity/8925 · Publicação no Telegram
• https://access.redhat.com/security/cve/cve-2012-5663 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-5663 · Nota de Segurança
• http://gnats.netbsd.org/47360 · Nota
• https://security-tracker.debian.org/tracker/CVE-2012-5663 · Aviso do Fabricante