Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-2653HistoryJul 12, 2012 - 8:55 p.m.
CVE-2012-2653
2012-07-1220:55:00
Debian Security Bug Tracker
security-tracker.debian.org
13
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.011 Low
EPSS
Percentile
84.6%
arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabilities in the daemon.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | arpwatch | < 2.1a15-1.2 | arpwatch_2.1a15-1.2_all.deb |
| Debian | 11 | all | arpwatch | < 2.1a15-1.2 | arpwatch_2.1a15-1.2_all.deb |
| Debian | 10 | all | arpwatch | < 2.1a15-1.2 | arpwatch_2.1a15-1.2_all.deb |
| Debian | 999 | all | arpwatch | < 2.1a15-1.2 | arpwatch_2.1a15-1.2_all.deb |
| Debian | 13 | all | arpwatch | < 2.1a15-1.2 | arpwatch_2.1a15-1.2_all.deb |
Related
openvas
openvas
Mandriva Update for arpwatch MDVSA-2012:113 (arpwatch)
2012-07-30 00:00:00
Mandriva Update for arpwatch MDVSA-2012:113 (arpwatch)
2012-07-30 00:00:00
Debian Security Advisory DSA 2482-1 (libgdata)
2012-08-10 00:00:00
securityvulns
securityvulns
arpwatch protection bypass
2012-06-17 00:00:00
[SECURITY] [DSA 2481-1] arpwatch security update
2012-06-17 00:00:00
nessus
nessus
GLSA-201607-16 : arpwatch: Privilege escalation
2016-07-21 00:00:00
Mandriva Linux Security Advisory : arpwatch (MDVSA-2013:030)
2013-04-20 00:00:00
Fedora 15 : arpwatch-2.1a15-16.fc15 (2012-8702)
2012-06-20 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: arpwatch-2.1a15-18.fc16
2012-06-20 00:35:29
[SECURITY] Fedora 17 Update: arpwatch-2.1a15-20.fc17
2012-06-20 00:31:35
[SECURITY] Fedora 15 Update: arpwatch-2.1a15-16.fc15
2012-06-20 00:34:25
gentoo
gentoo
arpwatch: Privilege escalation
2016-07-20 00:00:00
debian
debian
[SECURITY] [DSA 2481-1] arpwatch security update
2012-06-02 12:50:29
[SECURITY] [DSA 2482-1] arpwatch security update
2012-06-02 12:52:49
[SECURITY] [DSA 2482-1] libgdata security update
2012-06-02 13:06:05
ubuntucve
ubuntucve
CVE-2012-2653
2012-07-12 00:00:00
cbl_mariner
cbl_mariner
CVE-2012-2653 affecting package arpwatch 2.1a15-51
2024-05-05 09:06:37
prion
prion
Design/Logic Flaw
2012-07-12 20:55:00
cve
cve
CVE-2012-2653
2012-07-12 20:55:00
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.011 Low
EPSS
Percentile
84.6%
Related for DEBIANCVE:CVE-2012-2653