PT-2012-4727 · None · Extplorer

Andreas Beckmann + 1 · Published 2012-08-07 · Updated 2012-08-08 · CVE-2012-3454

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions eXtplorer version 2.1.0b6

Description The issue concerns the use of world-writable permissions for the /var/lib/extplorer/ftp tmp directory. This setup allows local users to delete or overwrite arbitrary files.

Recommendations For version 2.1.0b6, change the permissions of the /var/lib/extplorer/ftp tmp directory to prevent world-writable access, restricting write permissions to only the necessary users or groups.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-3454

Affected Products

Extplorer

References · 7

• https://ubuntu.com/security/CVE-2012-3454 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-3454 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2012-3454 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-3454 · Security Note
• http://securityfocus.com/bid/54801 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3454 · Note
• http://openwall.com/lists/oss-security/2012/08/03/7 · Note