CVE-2012-0787

NONE EPSS 33.2%
Published Nov 23, 201312y ago · Modified Jun 16, 20262w ago
Find Similar
Published Nov 23, 2013 12y ago
Last Modified Jun 16, 2026 2w ago

Description

The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files and obtain sensitive information via a bind mount on the (1) .augsave or (2) destination file when using the backup save option, or (3) .augnew file when using the newfile save option.

Threat Intelligence

EPSS Exploit Probability
33.2% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Affected Products 38

VendorProductVersionRange
redhatenterprise_linux6.0any
augeasaugeas* ≤0.10.0
augeasaugeas0.0.1any
augeasaugeas0.0.2any
augeasaugeas0.0.3any
augeasaugeas0.0.4any
augeasaugeas0.0.5any
augeasaugeas0.0.6any
augeasaugeas0.0.7any
augeasaugeas0.0.8any
augeasaugeas0.1.0any
augeasaugeas0.1.1any
augeasaugeas0.2.0any
augeasaugeas0.2.1any
augeasaugeas0.2.2any
augeasaugeas0.3.0any
augeasaugeas0.3.1any
augeasaugeas0.3.2any
augeasaugeas0.3.3any
augeasaugeas0.3.4any
augeasaugeas0.3.5any
augeasaugeas0.3.6any
augeasaugeas0.4.0any
augeasaugeas0.4.1any
augeasaugeas0.4.2any
augeasaugeas0.5.0any
augeasaugeas0.5.1any
augeasaugeas0.5.2any
augeasaugeas0.5.3any
augeasaugeas0.6.0any
augeasaugeas0.7.0any
augeasaugeas0.7.1any
augeasaugeas0.7.2any
augeasaugeas0.7.3any
augeasaugeas0.7.4any
augeasaugeas0.8.0any
augeasaugeas0.8.1any
augeasaugeas0.9.0any

References 5

  • augeas.net http://augeas.net/news.html
  • rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2013-1537.html
    Vendor Advisory
  • secunia.com http://secunia.com/advisories/55811
    Vendor Advisory
  • bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=772261
    Exploit
  • github.com https://github.com/hercules-team/augeas/commit/b8de6a8c
    ExploitPatch

Remediation

  • github.com https://github.com/hercules-team/augeas/commit/b8de6a8c
    ExploitPatch