| Vulnerability Name: | CVE-2012-1093 (CCN-177056) | ||||||||||||||||||||||||||||||||||||||||||||
| Assigned: | 2012-02-28 | ||||||||||||||||||||||||||||||||||||||||||||
| Published: | 2012-02-28 | ||||||||||||||||||||||||||||||||||||||||||||
| Updated: | 2021-02-25 | ||||||||||||||||||||||||||||||||||||||||||||
| Summary: | The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a privilege escalation during package installation. | ||||||||||||||||||||||||||||||||||||||||||||
| CVSS v3 Severity: | 7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) 6.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
6.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
| ||||||||||||||||||||||||||||||||||||||||||||
| CVSS v2 Severity: | 6.9 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C)
| ||||||||||||||||||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-59 | ||||||||||||||||||||||||||||||||||||||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||||||||||||||||||||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2012-1093 Source: MISC Type: Exploit, Third Party Advisory http://vladz.devzero.fr/012_x11-common-vuln.html Source: MISC Type: Exploit, Mailing List, Third Party Advisory http://www.openwall.com/lists/oss-security/2012/02/29/1 Source: MISC Type: Mailing List, Third Party Advisory http://www.openwall.com/lists/oss-security/2012/03/01/1 Source: MISC Type: Broken Link https://access.redhat.com/security/cve/cve-2012-1093 Source: CCN Type: Debian Bug tracking system Debian Bug report logs: Bugs in package x11-common Source: XF Type: UNKNOWN debian-cve20121093-priv-esc(177056) Source: MLIST Type: UNKNOWN [mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar Source: MISC Type: Vendor Advisory https://security-tracker.debian.org/tracker/CVE-2012-1093 Source: CCN Type: oss-sec Mailing List, Tue, 28 Feb 2012 17:01:19 -0700 Re: CVE request: init script x11-common creates directories in insecure manners Source: CCN Type: WhiteSource Vulnerability Database CVE-2012-1093 | ||||||||||||||||||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||||||||||||||||||