logol 1.5.0 uses world writable permissions for the /var/lib/logol/results directory, which allows local users to delete or overwrite arbitrary files.
References
Configurations
History
21 Nov 2024, 01:40
Type | Values Removed | Values Added |
---|---|---|
References | () http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683647 - | |
References | () http://www.openwall.com/lists/oss-security/2012/08/03/8 - | |
References | () http://www.securityfocus.com/bid/54802 - |
Information
Published : 2012-08-07 20:55
Updated : 2024-11-21 01:40
NVD link : CVE-2012-3453
Mitre link : CVE-2012-3453
CVE.ORG link : CVE-2012-3453
JSON object : View
Products Affected
debian
- logol
CWE
CWE-264
Permissions, Privileges, and Access Controls