PT-2012-1056 · Uc Berkeley+1 · Arpwatch+1

Kurt Seifried · Published 2012-07-12 · Updated 2016-11-28 · CVE-2012-2653

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions arpwatch versions 2.1a15

Description The issue concerns multiple vulnerabilities in the arpwatch package, which can be exploited to compromise the confidentiality, integrity, and availability of protected information. Exploitation can be carried out remotely. Specifically, arpwatch does not properly drop supplementary groups, potentially allowing attackers to gain root privileges by leveraging other vulnerabilities in the daemon.

Recommendations For arpwatch version 2.1a15, consider restricting access to the daemon until a patch is available to prevent potential privilege escalation. As a temporary workaround, ensure that the daemon is run with the least privileges necessary to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-03563

CVE-2012-2653

DSA-2481-1

SUSE-SU-2012_0987-1

Affected Products

Suse

Arpwatch

References · 22

• http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082553.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-2653 · Vendor Advisory
• https://security.gentoo.org/glsa/201607-16 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2653 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082569.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-2653 · Security Note
• http://debian.org/security/2012/dsa-2481 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-2653 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082565.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-2653 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2012:113 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03563 · Security Note
• http://support.novell.com/security/cve/CVE-2012-2653.html · Note
• http://openwall.com/lists/oss-security/2012/05/24/13 · Note
• http://download.novell.com/patch/finder/?keywords=a181e98d3d045bfca8ffda670ddb0d79 · Note