NVD

Id
44374  
Name
CVE-2012-2653  
Description
arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabilities in the daemon.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-07-12  
Modified Date
2016-11-28  
Seq
2012-2653  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
222564 44374 CVE-2012-2653 FEDORA-2012-8677  View
222565 44374 CVE-2012-2653 FEDORA-2012-8702  View
222566 44374 CVE-2012-2653 FEDORA-2012-8675  View
222567 44374 CVE-2012-2653 DSA-2481  View
222568 44374 CVE-2012-2653 MDVSA-2012:113  View
222569 44374 CVE-2012-2653 [oss-security] 20120524 Re: CVE Request: powerdns does not clear supplementary groups  View
222570 44374 CVE-2012-2653 [oss-security] 20120525 Re: CVE Request: powerdns does not clear supplementary groups  View
222571 44374 CVE-2012-2653 [oss-security] 20120524 Re: CVE Request: powerdns does not clear supplementary groups  View
222572 44374 CVE-2012-2653 [oss-security] 20120525 Re: CVE Request: powerdns does not clear supplementary groups  View
222573 44374 CVE-2012-2653 GLSA-201607-16  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27372 JVNDB-2012-003079 arpwatch における root 権限を取得される脆弱性 複数の Linux ディストリビューションで使用される arpwatch は、適切に補助グループを削除しないため、root 権限を取得される脆弱性が存在します。 CVE-2012-2653 55891 CVE-2012-2653 44374 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003079.html 2012-07-12 2012-07-17 View