NVD

Id
43942  
Name
CVE-2012-2093  
Description
src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to the get_tmpfile_name function.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-05-18  
Modified Date
2013-04-18  
Seq
2012-2093  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220709 43942 CVE-2012-2093 http://hg.gajim.org/gajim/rev/f046e4aaf7d4  View
220710 43942 CVE-2012-2093 FEDORA-2012-6161  View
220711 43942 CVE-2012-2093 FEDORA-2012-6001  View
220712 43942 CVE-2012-2093 FEDORA-2012-6061  View
220713 43942 CVE-2012-2093 GLSA-201208-04  View
220714 43942 CVE-2012-2093 [oss-security] 20120410 RE: gajim insecure file creation when using latex  View
220715 43942 CVE-2012-2093 [oss-security] 20120410 gajim insecure file creation when using latex  View
220716 43942 CVE-2012-2093 53017  View
220717 43942 CVE-2012-2093 gajim-gettmpfilename-symlink(74869)  View
220718 43942 CVE-2012-2093 https://trac.gajim.org/changeset/13759/src/common/latex.py  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26759 JVNDB-2012-002466 Gajim の src/common/latex.py における任意のファイルを上書きされる脆弱性 Gajim の src/common/latex.py には、get_tmpfile_name 関数に関する処理に不備があるため、任意のファイルを上書きされる脆弱性が存在します。 CVE-2012-2093 55331 CVE-2012-2093 43942 3.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002466.html 2012-04-10 2012-06-20 View