CVE-2012-3454: Low severity eXtplorer extplorer vulnerability
Published Aug 7, 2012
·Updated
eXtplorer 2.1.0b6 uses world writable permissions for the /var/lib/extplorer/ftptmp directory, which allows local users to delete or overwrite arbitrary files.
Affected Software
1 affected component
eXtplorer extplorer=2.1.0-b6
Event History
Aug 7, 2012
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-3454?
CVE-2012-3454 is considered a medium severity vulnerability due to its potential for local file manipulation.
2
How do I fix CVE-2012-3454?
To fix CVE-2012-3454, restrict the permissions of the /var/lib/extplorer/ftp_tmp directory to prevent world writable access.
3
Who is affected by CVE-2012-3454?
CVE-2012-3454 affects eXtplorer version 2.1.0b6, specifically installations that have the vulnerable permissions set.
4
What type of attack can exploit CVE-2012-3454?
CVE-2012-3454 can be exploited by local users to delete or overwrite arbitrary files on the system.
5
Is there a known mitigation for CVE-2012-3454?
The known mitigation for CVE-2012-3454 is to change the directory permissions to disallow write access to unauthorized users.