Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-3454
cve-2012-3454
extplorer
permission vulnerability
file deletion
file overwrite
nvd
3.6 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
eXtplorer 2.1.0b6 uses world writable permissions for the /var/lib/extplorer/ftp_tmp directory, which allows local users to delete or overwrite arbitrary files.
Affected configurations
Node
extplorerextplorerMatch2.1.0b6
| CPE | Name | Operator | Version |
|---|---|---|---|
| extplorer:extplorer | extplorer | eq | 2.1.0 |
Related
prion
prion
Design/Logic Flaw
2012-08-07 20:55:00
nvd
nvd
CVE-2012-3454
2012-08-07 20:55:04
cvelist
cvelist
CVE-2012-3454
2022-10-03 16:15:24
ubuntucve
ubuntucve
CVE-2012-3454
2012-08-07 00:00:00
3.6 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2012-3454