CVE-2012-6607: Path Traversal
Published Nov 23, 2013
·Updated
The transformsave function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augsave file in a backup save action, a different vector than CVE-2012-0786.
Affected Software
37 affected components
Augeas augeas<=0.10.0
Augeas augeas=0.0.1
Augeas augeas=0.0.2
Augeas augeas=0.0.3
Augeas augeas=0.0.4
Augeas augeas=0.0.5
Augeas augeas=0.0.6
Augeas augeas=0.0.7
Augeas augeas=0.0.8
Augeas augeas=0.1.0
Augeas augeas=0.1.1
Augeas augeas=0.2.0
Augeas augeas=0.2.1
Augeas augeas=0.2.2
Augeas augeas=0.3.0
Augeas augeas=0.3.1
Augeas augeas=0.3.2
Augeas augeas=0.3.3
Augeas augeas=0.3.4
Augeas augeas=0.3.5
Augeas augeas=0.3.6
Augeas augeas=0.4.0
Augeas augeas=0.4.1
Augeas augeas=0.4.2
Augeas augeas=0.5.0
Augeas augeas=0.5.1
Augeas augeas=0.5.2
Augeas augeas=0.5.3
Augeas augeas=0.6.0
Augeas augeas=0.7.0
Augeas augeas=0.7.1
Augeas augeas=0.7.2
Augeas augeas=0.7.3
Augeas augeas=0.7.4
Augeas augeas=0.8.0
Augeas augeas=0.8.1
Augeas augeas=0.9.0
Event History
Nov 23, 2013
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-6607?
CVE-2012-6607 is considered a medium severity vulnerability that allows local users to overwrite arbitrary files.
2
How do I fix CVE-2012-6607?
To mitigate CVE-2012-6607, upgrade Augeas to version 1.0.0 or later.
3
What type of attack is associated with CVE-2012-6607?
CVE-2012-6607 is associated with a symlink attack targeting the .augsave file during backup save actions.
4
Who can be impacted by CVE-2012-6607?
Local users with access to vulnerable versions of Augeas can be impacted by CVE-2012-6607.
5
In which versions of Augeas is CVE-2012-6607 found?
CVE-2012-6607 affects Augeas versions prior to 1.0.0.