CVE

Id
54029  
CVE No.
CVE-2012-0786  
Status
Candidate  
Description
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.  
Phase
Assigned (20120119)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
568394 54029 CVE-2012-0786 CONFIRM:http://augeas.net/news.html  View
568395 54029 CVE-2012-0786 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=772257  View
568396 54029 CVE-2012-0786 CONFIRM:https://github.com/hercules-team/augeas/commit/16387744  View
568397 54029 CVE-2012-0786 REDHAT:RHSA-2013:1537  View
568398 54029 CVE-2012-0786 URL:http://rhn.redhat.com/errata/RHSA-2013-1537.html  View
568399 54029 CVE-2012-0786 SECUNIA:55811  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25488 JVNDB-2012-001195 Horde IMP および Horde Groupware Webmail Edition におけるクロスサイトスクリプティングの脆弱性 Horde IMP および Horde Groupware Webmail Edition には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-0791 54029 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001195.html  View