Lucene search

[email protected]CVE-2012-0871

HistoryApr 18, 2014 - 2:55 p.m.

CVE-2012-0871

2014-04-1814:55:25

CWE-59

[email protected]

web.nvd.nist.gov

systemd

logind

symlink attack

x11

cve-2012-0871

security vulnerability

CVSS2

6.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:C/A:C

AI Score

6.3

Confidence

Low

EPSS

Percentile

5.1%

JSON

The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.

Affected configurations

NVD

Node

systemd_projectsystemdRange≤037

systemd_projectsystemdMatch1

systemd_projectsystemdMatch2

systemd_projectsystemdMatch3

systemd_projectsystemdMatch4

systemd_projectsystemdMatch5

systemd_projectsystemdMatch6

systemd_projectsystemdMatch7

systemd_projectsystemdMatch8

systemd_projectsystemdMatch9

systemd_projectsystemdMatch10

systemd_projectsystemdMatch11

systemd_projectsystemdMatch12

systemd_projectsystemdMatch13

systemd_projectsystemdMatch14

systemd_projectsystemdMatch15

systemd_projectsystemdMatch16

systemd_projectsystemdMatch17

systemd_projectsystemdMatch18

systemd_projectsystemdMatch19

systemd_projectsystemdMatch20

systemd_projectsystemdMatch21

systemd_projectsystemdMatch22

systemd_projectsystemdMatch23

systemd_projectsystemdMatch24

systemd_projectsystemdMatch25

systemd_projectsystemdMatch26

systemd_projectsystemdMatch27

systemd_projectsystemdMatch28

systemd_projectsystemdMatch29

systemd_projectsystemdMatch30

systemd_projectsystemdMatch31

systemd_projectsystemdMatch32

systemd_projectsystemdMatch33

systemd_projectsystemdMatch34

systemd_projectsystemdMatch35

systemd_projectsystemdMatch36

opensuseopensuseMatch12.1

VendorProductVersionCPE
systemd_projectsystemd30cpe:/a:systemd_project:systemd:30:::
systemd_projectsystemd4cpe:/a:systemd_project:systemd:4:::
systemd_projectsystemd17cpe:/a:systemd_project:systemd:17:::
systemd_projectsystemd26cpe:/a:systemd_project:systemd:26:::
systemd_projectsystemd12cpe:/a:systemd_project:systemd:12:::
systemd_projectsystemd2cpe:/a:systemd_project:systemd:2:::
systemd_projectsystemd13cpe:/a:systemd_project:systemd:13:::
systemd_projectsystemd25cpe:/a:systemd_project:systemd:25:::
systemd_projectsystemd7cpe:/a:systemd_project:systemd:7:::
systemd_projectsystemd1cpe:/a:systemd_project:systemd:1:::

Vendor	Product	Version	CPE
systemd_project	systemd	30	cpe:/a:systemd_project:systemd:30:::
systemd_project	systemd	4	cpe:/a:systemd_project:systemd:4:::
systemd_project	systemd	17	cpe:/a:systemd_project:systemd:17:::
systemd_project	systemd	26	cpe:/a:systemd_project:systemd:26:::
systemd_project	systemd	12	cpe:/a:systemd_project:systemd:12:::
systemd_project	systemd	2	cpe:/a:systemd_project:systemd:2:::
systemd_project	systemd	13	cpe:/a:systemd_project:systemd:13:::
systemd_project	systemd	25	cpe:/a:systemd_project:systemd:25:::
systemd_project	systemd	7	cpe:/a:systemd_project:systemd:7:::
systemd_project	systemd	1	cpe:/a:systemd_project:systemd:1:::