CVE-2012-1174: Race Condition
A TOCTOU race condition was found in the way the systemd-logind login manager of the systemd, a system and service manager for Linux, performed removal of particular records related with user session upon user logout. A local attacker could use this flaw to conduct symbolic link attacks, potentially leading to removal of arbitrary system file.
Other sources
The rmrfchildren function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1174?
CVE-2012-1174 has been classified with a moderate severity level due to its potential for local attacker exploitation.
How do I fix CVE-2012-1174?
To fix CVE-2012-1174, it is recommended to update the systemd package to the latest version that addresses this vulnerability.
Who is affected by CVE-2012-1174?
Users of systemd version 43 are affected by CVE-2012-1174.
What type of attack can be executed using CVE-2012-1174?
CVE-2012-1174 can be exploited through symbolic link attacks that target user session records during logout.
When was CVE-2012-1174 discovered?
CVE-2012-1174 was reported in 2012.