CVE-2012-0871

{"id": "CVE-2012-0871", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.3, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:N/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 9.2, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-04-18T14:55:25.227", "references": [{"url": "http://cgit.freedesktop.org/systemd/systemd/commit/?id=fc3c1c6e091ea16ad5600b145201ec535bbb5d7c", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00030.html", "source": "secalert@redhat.com"}, {"url": "http://www.osvdb.org/79768", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.novell.com/show_bug.cgi?id=747154", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=795853", "source": "secalert@redhat.com"}, {"url": "http://cgit.freedesktop.org/systemd/systemd/commit/?id=fc3c1c6e091ea16ad5600b145201ec535bbb5d7c", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00030.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/79768", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.novell.com/show_bug.cgi?id=747154", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=795853", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-59"}]}], "descriptions": [{"lang": "en", "value": "The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/."}, {"lang": "es", "value": "La funci\u00f3n session_link_x11_socket en login/logind-session.c en systemd-logind en systemd, posiblemente 37 y anteriores, permite a usuarios locales crear o sobrescribir archivos arbitrarios a trav\u00e9s de un ataque symlink sobre el directorio de usuario X11 en /run/user/."}], "lastModified": "2024-11-21T01:35:52.960", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0F8B5B7-699C-4FEB-BD06-096D221839A9", "versionEndIncluding": "037"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F94D3F3F-896A-462A-A08E-9E96758C7044"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC8D95CE-2009-4554-9940-00D9C3558323"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D69D4F3E-C996-4613-933D-CCD60E275F41"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FD1E624C-A4BA-48F9-833B-268BCF4CF9C0"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C465DE7-15B8-41A1-82A1-FCFC7BC3BAFF"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40BB0049-1585-419A-96B6-18AE7DFB2481"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62854970-1CB8-490C-93D9-73BBA790E972"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0306A23C-8A10-4486-B903-7A45B57C7449"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4FE1A3BA-B695-436F-906A-4BC3AF73F1CE"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA57D859-BC9C-4D6B-A6DA-72EC50C6B8B2"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E28AE943-31FE-44E2-B605-E2F0CA0864F6"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4DE37C52-32FD-4847-A2CB-5B886945D99A"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F3FAFD13-1E57-4F25-BD74-A0848C9C8C6B"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE28D3B0-5386-4C19-9EE5-D0900CF17F8B"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "831DE806-EBAA-4B9A-8A6C-DA97562ECEA6"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F93B2D0-5D73-4F91-BEA5-9B78FC9275AA"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F84734C1-2F2B-4DAA-97F1-A4FD8351912E"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9896DD5A-165F-42F6-B3E1-170972E95870"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:19:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66F321BA-39FF-4ECE-A834-E703F1E506B7"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1586F77-1E4A-449C-9B5A-ACC53A0EFB53"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3890D45B-3EF1-4640-9178-0BE44AF6A351"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B8DA70D-3A30-4284-BDE5-173034217292"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "421D9E8B-78EC-40A1-B9FF-A97A02C62516"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73F57756-778D-4EB0-B0E5-B8B5D92705F6"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64D83463-13ED-430C-8C40-2237DF0E3643"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:26:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79AF61C4-416D-451A-AACC-16F58341583F"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC4E6FD6-1682-45D8-ABE1-AF3246ED19F7"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:28:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F122D3A-BA34-47C7-88D6-E6D95336B9C4"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:29:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19083D70-7A2E-4064-9145-1B446732BEC9"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "187847B5-8B9C-43F2-A473-53618ADE5B46"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:31:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08D20503-7386-4883-9BE6-6393783E5E61"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "023D79B4-A812-453E-B255-92787C3D2F24"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:33:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE7541DE-707D-4D9A-943E-F664B4A8E269"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:34:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADB3E996-91FD-43F5-BE5D-860F4BE3E79B"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "57EC044B-6556-4CE2-B3DB-C03D9D9983CB"}, {"criteria": "cpe:2.3:a:systemd_project:systemd:36:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D59DCAD7-7C82-41A2-89BA-4F05BEC08106"}, {"criteria": "cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBB2C482-D2A4-48B3-ACE7-E1DFDCC409B5"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}