Executive Summary

Informations
Name CVE-2012-2690 First vendor Publication 2012-06-29
Vendor Cve Last vendor Modification 2017-08-29

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:P/I:N/A:N)
Cvss Base Score 2.1 Attack Range Local
Cvss Impact Score 2.9 Attack Complexity Low
Cvss Expoit Score 3.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2690

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-255 Credentials Management

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:21147
 
Oval ID: oval:org.mitre.oval:def:21147
Title: RHSA-2012:0774: libguestfs security, bug fix, and enhancement update (Low)
Description: virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.
Family: unix Class: patch
Reference(s): RHSA-2012:0774-04
CESA-2012:0774
CVE-2012-2690
 Version: 4
Platform(s): Red Hat Enterprise Linux 6
CentOS Linux 6
 Product(s): libguestfs
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:23433
 
Oval ID: oval:org.mitre.oval:def:23433
Title: ELSA-2012:0774: libguestfs security, bug fix, and enhancement update (Low)
Description: virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.
Family: unix Class: patch
Reference(s): ELSA-2012:0774-04
CVE-2012-2690
 Version: 6
Platform(s): Oracle Linux 6
 Product(s): libguestfs
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27617
 
Oval ID: oval:org.mitre.oval:def:27617
Title: DEPRECATED: ELSA-2012-0774 -- libguestfs security, bug fix, and enhancement update (low)
Description: [1:1.16.19-1] - Rebase to libguestfs 1.16.19 resolves: rhbz#719879 - Rebuild against augeas 0.9.0-3.el6 related: rhbz#808662 - Fix: Don't abort inspection if mdadm.conf ARRAY doesn't have a uuid. - Switch back to git for patch management.
Family: unix Class: patch
Reference(s): ELSA-2012-0774
CVE-2012-2690
 Version: 4
Platform(s): Oracle Linux 6
 Product(s): libguestfs
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 94

OpenVAS Exploits

Date Description
2012-07-30 Name : CentOS Update for libguestfs CESA-2012:0774 centos6
File : nvt/gb_CESA-2012_0774_libguestfs_centos6.nasl
2012-06-22 Name : RedHat Update for libguestfs RHSA-2012:0774-04
File : nvt/gb_RHSA-2012_0774-04_libguestfs.nasl

Nessus® Vulnerability Scanner

Date Description
2013-07-12 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2012-0774.nasl - Type : ACT_GATHER_INFO
2013-01-24 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2012-0774.nasl - Type : ACT_GATHER_INFO
2012-08-01 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20120620_libguestfs_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-07-11 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2012-0774.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/53932
MLIST https://www.redhat.com/archives/libguestfs/2012-May/msg00104.html
REDHAT http://rhn.redhat.com/errata/RHSA-2012-0774.html
SECUNIA http://secunia.com/advisories/49431
http://secunia.com/advisories/49545
XF https://exchange.xforce.ibmcloud.com/vulnerabilities/76220

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
Date Informations
2022-07-21 01:13:23
  • Multiple Updates
2021-05-04 12:20:00
  • Multiple Updates
2021-04-22 01:23:43
  • Multiple Updates
2020-05-23 01:48:50
  • Multiple Updates
2020-05-23 00:33:42
  • Multiple Updates
2017-08-29 09:23:49
  • Multiple Updates
2016-04-26 21:51:32
  • Multiple Updates
2014-02-17 11:10:39
  • Multiple Updates
2013-05-10 22:40:02
  • Multiple Updates