CVE-2012-0054 in GoLismeroinfo

Summary

libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files, as demonstrated using Admin/changes.dat.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

12/07/2011

Disclosure

03/19/2012

Entries

1

CPE

ready

CWE

CWE-59

CVSS

5.1

EPSS

0.00033

CTI

0.00

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2012-0054
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2012-0054
CVE Detailshttps://www.cvedetails.com/cve/CVE-2012-0054/

◂ PreviousOverviewNext ▸

Want to know what is going to be exploited?

We predict KEV entries!