CVE-2012-6607 in Augeas

Resumen (Inglés)

The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augsave file in a backup save action, a different vector than CVE-2012-0786.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2013-11-23

Divulgación

2013-11-23

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
65556	Augeas transform.c transform_save recorrido de directorios	22	No está definido	Arreglo oficial	CVE-2012-6607

Fuentes

• MITRE
• NVD
• CVE Details