CVE-2012-0054

State: Published
Severity: Not scored
Published: Mar 19, 2012
Updated: Sep 16, 2024
Reserved: Dec 7, 2011

Description

libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files, as demonstrated using Admin/changes.dat.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

78472vdb-entry
[oss-security] 20120117 Re: CVE-request: golismero symlink vulnerabilitymailing-list
[oss-security] 20120117 CVE-request: golismero symlink vulnerabilitymailing-list
http://code.google.com/p/golismero/source/detail?r=2b3bb43d68676efd687361f7de29380189031ab8

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.