CVE-2012-3453

logol 1.5.0 uses world writable permissions for the /var/lib/logol/results directory, which allows local users to delete or overwrite arbitrary files.
Configurations

Configuration 1 (hide)

cpe:2.3:a:debian:logol:1.5.0:*:*:*:*:*:*:*

History

21 Nov 2024, 01:40

Type Values Removed Values Added
References () http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683647 - () http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683647 -
References () http://www.openwall.com/lists/oss-security/2012/08/03/8 - () http://www.openwall.com/lists/oss-security/2012/08/03/8 -
References () http://www.securityfocus.com/bid/54802 - () http://www.securityfocus.com/bid/54802 -

Information

Published : 2012-08-07 20:55

Updated : 2024-11-21 01:40


NVD link : CVE-2012-3453

Mitre link : CVE-2012-3453

CVE.ORG link : CVE-2012-3453


JSON object : View

Products Affected

debian

  • logol
CWE
CWE-264

Permissions, Privileges, and Access Controls