NVD

Id
42936  
Name
CVE-2012-0871  
Description
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.  
Reject
 
CVSS Version
2  
CVSS Score
6.3  
Severity
Medium  
CVSS Base Score
6.3  
CVSS Impact Subscore
9.2  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-04-18  
Modified Date
2014-04-21  
Seq
2012-0871  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
216144 42936 CVE-2012-0871 http://cgit.freedesktop.org/systemd/systemd/commit/?id=fc3c1c6e091ea16ad5600b145201ec535bbb5d7c  View
216145 42936 CVE-2012-0871 SUSE-SA:2012:001  View
216146 42936 CVE-2012-0871 https://bugzilla.novell.com/show_bug.cgi?id=747154  View
216147 42936 CVE-2012-0871 https://bugzilla.redhat.com/show_bug.cgi?id=795853  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30480 JVNDB-2012-006188 systemd の session_link_x11_socket 関数における任意のファイルを作成される脆弱性 systemd の systemd-logind の login/logind-session.c 内の session_link_x11_socket 関数には、任意のファイルを作成される、または上書きされる脆弱性が存在します。 CVE-2012-0871 54109 CVE-2012-0871 42936 6.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006188.html 2012-02-29 2014-04-22 View