NVD

Id
44253  
Name
CVE-2012-2451  
Description
The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack. NOTE: some of these details are obtained from third party information. NOTE: it has been reported that this might only be exploitable by writing in the same directory as the .ini file. If this is the case, then this issue might not cross privilege boundaries.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-06-27  
Modified Date
2012-11-06  
Seq
2012-2451  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
222193 44253 CVE-2012-2451 FEDORA-2012-7802  View
222194 44253 CVE-2012-2451 FEDORA-2012-7777  View
222195 44253 CVE-2012-2451 FEDORA-2012-7763  View
222196 44253 CVE-2012-2451 [oss-security] 20120502 temporary file issue in Config::IniFiles Config-IniFiles perl-Config-IniFiles  View
222197 44253 CVE-2012-2451 53361  View
222198 44253 CVE-2012-2451 USN-1543-1  View
222199 44253 CVE-2012-2451 config-inifiles-symlink(75328)  View
222200 44253 CVE-2012-2451 https://bitbucket.org/shlomif/perl-config-inifiles/changeset/a08fa26f4f59  View
222201 44253 CVE-2012-2451 https://bugzilla.redhat.com/show_bug.cgi?id=818386  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27219 JVNDB-2012-002926 Perl 用 Config::IniFiles モジュールにおける任意のファイルを上書きされる脆弱性 Perl 用 Config::IniFiles モジュールは、予測可能なファイル名を用いて一時ファイルを作成するため、任意のファイルを上書きされる脆弱性が存在します。 CVE-2012-2451 55689 CVE-2012-2451 44253 3.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002926.html 2012-06-27 2012-11-16 View