NVD

Id
45005  
Name
CVE-2012-3410  
Description
Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd, which is not properly handled when expanding the /dev/fd prefix.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-08-27  
Modified Date
2013-04-18  
Seq
2012-3410  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225503 45005 CVE-2012-3410 ftp://ftp.gnu.org/pub/gnu/bash/bash-4.2-patches/bash42-033  View
225504 45005 CVE-2012-3410 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681278  View
225505 45005 CVE-2012-3410 GLSA-201210-05  View
225506 45005 CVE-2012-3410 MDVSA-2012:128  View
225507 45005 CVE-2012-3410 [oss-security] 20120711 CVE Request: Overflow fix in bash 4.2 patch 33  View
225508 45005 CVE-2012-3410 [oss-security] 20120712 Re: CVE Request: Overflow fix in bash 4.2 patch 33  View
225509 45005 CVE-2012-3410 [oss-security] 20120712 Re: CVE Request: Overflow fix in bash 4.2 patch 33  View
225510 45005 CVE-2012-3410 54937  View
225511 45005 CVE-2012-3410 bash-devfd-bo(77551)  View
225512 45005 CVE-2012-3410 openSUSE-SU-2012:0898  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28222 JVNDB-2012-003929 GNU Bash の lib/sh/eaccess.c におけるスタックベースのバッファオーバーフローの脆弱性 GNU Bash のlib/sh/eaccess.c には、スタックベースのバッファオーバーフローの脆弱性が CVE-2012-3410 56648 CVE-2012-3410 45005 4.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003929.html 2012-07-09 2016-07-27 View