Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2012-0786
HistoryNov 23, 2013 - 12:00 a.m.

CVE-2012-0786

2013-11-2300:00:00
ubuntu.com
ubuntu.com
8

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%

JSON

The transform_save function in transform.c in Augeas before 1.0.0 allows
local users to overwrite arbitrary files and obtain sensitive information
via a symlink attack on a .augnew file.

Bugs

Notes

Author Note
seth-arnold An incomplete fix for this bug resulted in CVE-2013-6412.

Related

ubuntucve 2
openvas 17
nessus 16
securityvulns 2
osv 1
mageia 1
debian 1
cve 3
centos 2
oraclelinux 2
fedora 2
cvelist 3
prion 3
nvd 3
amazon 2
veracode 3
redhat 3
debiancve 3
ubuntucve
ubuntucve
CVE-2013-6412
2014-01-23 00:00:00
CVE-2012-6607
2013-11-23 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2014:1017-1)
2021-06-09 00:00:00
Mageia: Security Advisory (MGASA-2014-0058)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-28-1)
2023-03-08 00:00:00
nessus
nessus
SuSE 11.3 Security Update : augeas (SAT Patch Number 9574)
2014-08-14 00:00:00
Debian DLA-28-1 : augeas security update
2015-03-26 00:00:00
Mandriva Linux Security Advisory : augeas (MDVSA-2014:022)
2014-01-27 00:00:00
securityvulns
securityvulns
[ MDVSA-2014:022 ] augeas
2014-01-29 00:00:00
Augeas multiple security vulnerabilities
2014-01-29 00:00:00
osv
osv
augeas - security update
2014-08-01 00:00:00
mageia
mageia
Updated augeas package fixes security vulnerabilities
2014-02-12 21:10:49
debian
debian
[DLA 28-1] augeas security update
2014-08-01 11:12:53
cve
cve
CVE-2013-6412
2014-01-23 00:55:03
CVE-2012-0786
2013-11-23 18:55:04
CVE-2012-6607
2013-11-23 18:55:04
centos
centos
augeas security update
2014-01-20 17:58:19
augeas security update
2013-11-26 13:31:08
oraclelinux
oraclelinux
augeas security update
2014-01-20 00:00:00
augeas security, bug fix, and enhancement update
2013-11-25 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: augeas-1.2.0-1.fc19
2014-03-15 15:06:08
[SECURITY] Fedora 20 Update: augeas-1.2.0-1.fc20
2014-03-15 15:11:16
cvelist
cvelist
CVE-2013-6412
2014-01-23 00:00:00
CVE-2012-0786
2013-11-23 18:00:00
CVE-2012-6607
2013-11-23 18:00:00
prion
prion
Code injection
2014-01-23 00:55:00
Design/Logic Flaw
2013-11-23 18:55:00
Design/Logic Flaw
2013-11-23 18:55:00
nvd
nvd
CVE-2013-6412
2014-01-23 00:55:03
CVE-2012-0786
2013-11-23 18:55:04
CVE-2012-6607
2013-11-23 18:55:04
amazon
amazon
Medium: augeas
2014-02-03 15:28:00
Low: augeas
2013-12-02 20:28:00
veracode
veracode
World Writable Permissions
2019-01-15 08:55:29
Symlink Attack
2019-01-15 09:01:38
Sensitive Information Disclosure
2019-05-02 04:58:48
redhat
redhat
(RHSA-2014:0044) Moderate: augeas security update
2014-01-20 00:00:00
(RHSA-2013:1537) Low: augeas security, bug fix, and enhancement update
2013-11-21 00:00:00
(RHSA-2013:1527) Important: rhev-hypervisor6 security and bug fix update
2013-11-21 00:00:00
debiancve
debiancve
CVE-2013-6412
2014-01-23 00:55:03
CVE-2012-0786
2013-11-23 18:55:04
CVE-2012-6607
2013-11-23 18:55:04

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for UB:CVE-2012-0786
ubuntucve2openvas17nessus16securityvulns2osv1mageia1debian1cve3centos2oraclelinux2fedora2cvelist3prion3nvd3amazon2veracode3redhat3debiancve3