[DLA 28-1] augeas security update

2014-08-0111:12:53

lists.debian.org

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Package : augeas
Version : 0.7.2-1+deb6u1
CVE ID : CVE-2012-0786 CVE-2012-0787 CVE-2013-6412
Debian Bug : 731111 731132

Multiple race conditions were discovered in augeas when saving
configuration files which expose it to symlink attacks.
Write access to the directory where the configuration file is located
is required by the attacker.
Attachment:
signature.asc
Description: This is a digitally signed message part.

OSVersionArchitecturePackageVersionFilename
Debian6amd64libaugeas0< 0.7.2-1+deb6u1libaugeas0_0.7.2-1+deb6u1_amd64.deb
Debian6allaugeas-lenses< 0.7.2-1+deb6u1augeas-lenses_0.7.2-1+deb6u1_all.deb
Debian6i386libaugeas-dev< 0.7.2-1+deb6u1libaugeas-dev_0.7.2-1+deb6u1_i386.deb
Debian6amd64libaugeas-dev< 0.7.2-1+deb6u1libaugeas-dev_0.7.2-1+deb6u1_amd64.deb
Debian6amd64augeas-dbg< 0.7.2-1+deb6u1augeas-dbg_0.7.2-1+deb6u1_amd64.deb
Debian6i386augeas-tools< 0.7.2-1+deb6u1augeas-tools_0.7.2-1+deb6u1_i386.deb
Debian6amd64augeas-tools< 0.7.2-1+deb6u1augeas-tools_0.7.2-1+deb6u1_amd64.deb
Debian6i386augeas-dbg< 0.7.2-1+deb6u1augeas-dbg_0.7.2-1+deb6u1_i386.deb
Debian6i386libaugeas0< 0.7.2-1+deb6u1libaugeas0_0.7.2-1+deb6u1_i386.deb
Debian6allaugeas< 0.7.2-1+deb6u1augeas_0.7.2-1+deb6u1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	amd64	libaugeas0	< 0.7.2-1+deb6u1	libaugeas0_0.7.2-1+deb6u1_amd64.deb
Debian	6	all	augeas-lenses	< 0.7.2-1+deb6u1	augeas-lenses_0.7.2-1+deb6u1_all.deb
Debian	6	i386	libaugeas-dev	< 0.7.2-1+deb6u1	libaugeas-dev_0.7.2-1+deb6u1_i386.deb
Debian	6	amd64	libaugeas-dev	< 0.7.2-1+deb6u1	libaugeas-dev_0.7.2-1+deb6u1_amd64.deb
Debian	6	amd64	augeas-dbg	< 0.7.2-1+deb6u1	augeas-dbg_0.7.2-1+deb6u1_amd64.deb
Debian	6	i386	augeas-tools	< 0.7.2-1+deb6u1	augeas-tools_0.7.2-1+deb6u1_i386.deb
Debian	6	amd64	augeas-tools	< 0.7.2-1+deb6u1	augeas-tools_0.7.2-1+deb6u1_amd64.deb
Debian	6	i386	augeas-dbg	< 0.7.2-1+deb6u1	augeas-dbg_0.7.2-1+deb6u1_i386.deb
Debian	6	i386	libaugeas0	< 0.7.2-1+deb6u1	libaugeas0_0.7.2-1+deb6u1_i386.deb
Debian	6	all	augeas	< 0.7.2-1+deb6u1	augeas_0.7.2-1+deb6u1_all.deb