PT-2013-1495 · Suse · Inst-Source-Utils+2

Published 2012-11-22 · Updated 2018-10-30 · CVE-2012-0427

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions yast2-add-on-creator in SUSE inst-source-utils versions 2008.11.26 through 2008.11.26-0.9.0 yast2-add-on-creator in SUSE inst-source-utils versions 2012.9.13 through 2012.9.13-0.8.0

Description The issue allows local users to gain privileges via a crafted (1) file name or (2) directory name.

Recommendations For yast2-add-on-creator in SUSE inst-source-utils versions 2008.11.26 through 2008.11.26-0.9.0, update to version 2008.11.26-0.9.1 or later. For yast2-add-on-creator in SUSE inst-source-utils versions 2012.9.13 through 2012.9.13-0.8.0, update to version 2012.9.13-0.8.1 or later.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-0427

SUSE-SU-2012_1529-1

Affected Products

Suse

Inst-Source-Utils

Yast2-Add-On-Creator

References · 11

• 🔥 https://bugzilla.novell.com/show_bug.cgi?id=604730 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-0427 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0427 · Security Note
• https://support.novell.com/security/cve/CVE-2012-0427.html · Vendor Advisory
• https://lists.suse.com/pipermail/sle-security-updates/2012-November/000304.html · Note
• http://download.novell.com/patch/finder/?keywords=37a5722f1fdf0e2643b80548de09976b · Note
• http://support.novell.com/security/cve/CVE-2012-0427.html · Note
• http://download.novell.com/patch/finder/?keywords=f35a1b0dc8ef2c77aa295b221038b7af · Note
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Note
• http://download.novell.com/Download?buildid=tGCXHQR48E4~ · Note
• https://bugzilla.novell.com/604730 · Note