Config-IniFiles vulnerability

2012-08-2000:00:00

ubuntu.com

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.2

Confidence

Low

EPSS

Percentile

5.1%

JSON

Releases

Ubuntu 12.04
Ubuntu 11.10
Ubuntu 11.04
Ubuntu 10.04

Packages

libconfig-inifiles-perl - Perl module for working with INI configuration files

Details

It was discovered that the perl Config::IniFiles module created temporary
files in an unsafe manner. A local user with write access to the directory
containing a configuration file that Config-IniFiles manipulates could
exploit this to overwrite arbitrary files.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.04noarchlibconfig-inifiles-perl< 2.68-1ubuntu0.12.04.1UNKNOWN
Ubuntu11.10noarchlibconfig-inifiles-perl< 2.68-1ubuntu0.11.10.1UNKNOWN
Ubuntu11.04noarchlibconfig-inifiles-perl< 2.58-1ubuntu0.1UNKNOWN
Ubuntu10.04noarchlibconfig-inifiles-perl< 2.52-1ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	12.04	noarch	libconfig-inifiles-perl	< 2.68-1ubuntu0.12.04.1	UNKNOWN
Ubuntu	11.10	noarch	libconfig-inifiles-perl	< 2.68-1ubuntu0.11.10.1	UNKNOWN
Ubuntu	11.04	noarch	libconfig-inifiles-perl	< 2.58-1ubuntu0.1	UNKNOWN
Ubuntu	10.04	noarch	libconfig-inifiles-perl	< 2.52-1ubuntu0.1	UNKNOWN