NVD

Id
45059  
Name
CVE-2012-3466  
Description
GNOME gnome-keyring 3.4.0 through 3.4.1, when gpg-cache-method is set to "idle" or "timeout," does not properly limit the amount of time a passphrase is cached, which allows attackers to have an unspecified impact via unknown attack vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-10-22  
Modified Date
2013-12-05  
Seq
2012-3466  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225939 45059 CVE-2012-3466 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683655  View
225940 45059 CVE-2012-3466 http://git.gnome.org/browse/gnome-keyring/commit/?id=51606f299e5ee9d48096db0a5957efe26cbf7cc3  View
225941 45059 CVE-2012-3466 http://git.gnome.org/browse/gnome-keyring/commit/?id=5dff623470b859e332dbe12afb0dc57b292832d2  View
225942 45059 CVE-2012-3466 openSUSE-SU-2012:1121  View
225943 45059 CVE-2012-3466 MDVSA-2013:084  View
225944 45059 CVE-2012-3466 [oss-security] 20120809 CVE Request: gnome-keyring: improper caching of gpg password/passphrase  View
225945 45059 CVE-2012-3466 [oss-security] 20120808 Re: CVE Request: gnome-keyring: improper caching of gpg password/passphrase  View
225946 45059 CVE-2012-3466 https://bugzilla.gnome.org/show_bug.cgi?id=681081  View
225947 45059 CVE-2012-3466 https://bugzilla.redhat.com/show_bug.cgi?id=845426  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29406 JVNDB-2012-005113 GNOME gnome-keyring における脆弱性 GNOME gnome-keyring は、gpg-cache-method が "idle" または "timeout" に設定されている場合、パスフレーズがキャッシュされる時間を適切に制限しないため、不特定の影響を受ける脆弱性が存在します。 CVE-2012-3466 56704 CVE-2012-3466 45059 4.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005113.html 2012-10-22 2012-10-24 View