PT-2019-6802 · Netbsd · Isearch

David Holland · Published 2019-12-30 · Updated 2020-01-10 · CVE-2012-5663

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions isearch versions prior to 1.47.01nb1

Description The issue concerns the creation of insecure temporary files in a publicly-writable area, specifically /tmp, due to the use of the tempnam() function.

Recommendations For versions prior to 1.47.01nb1, update to version 1.47.01nb1 or later to resolve the issue.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-459

CWE-269

Related Identifiers

CVE-2012-5663

Affected Products

Isearch

References · 7

• 🔥 http://openwall.com/lists/oss-security/2012/12/21/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-5663 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2012-5663 · Vendor Advisory
• http://openwall.com/lists/oss-security/2012/12/21/3 · Note
• https://t.me/cibsecurity/8925 · Telegram Post
• https://access.redhat.com/security/cve/cve-2012-5663 · Note
• http://gnats.netbsd.org/47360 · Note