Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-6648
HistoryMay 22, 2014 - 11:55 p.m.

CVE-2012-6648

2014-05-2223:55:03
CWE-264
[email protected]
web.nvd.nist.gov

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

gdm/guest-session-cleanup.sh in gdm-guest-session 0.24 and earlier, as used in Ubuntu Linux 10.04 LTS, 10.10, and 11.04, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT from CVE-2012-0943 per ADT1/ADT2 due to different codebases and affected versions. CVE-2012-0943 is used for the guest-account issue.

Affected configurations

NVD
Node
gdm-guest-session_projectgdm-guest-sessionRange≤0.24
OR
gdm-guest-session_projectgdm-guest-sessionMatch0.20
OR
gdm-guest-session_projectgdm-guest-sessionMatch0.21
OR
gdm-guest-session_projectgdm-guest-sessionMatch0.22
OR
gdm-guest-session_projectgdm-guest-sessionMatch0.23
OR
canonicalubuntu_linuxMatch10.04-lts
OR
canonicalubuntu_linuxMatch10.10
OR
canonicalubuntu_linuxMatch11.04

Related

ubuntucve 2
prion 2
debiancve 1
nvd 1
cve 2
cvelist 2
nessus 2
openvas 4
securityvulns 1
ubuntu 2
ubuntucve
ubuntucve
CVE-2012-6648
2014-05-22 00:00:00
CVE-2012-0943
2012-03-13 00:00:00
prion
prion
Design/Logic Flaw
2014-05-22 23:55:00
Session fixation
2014-05-22 23:55:00
debiancve
debiancve
CVE-2012-0943
2014-05-22 23:55:02
nvd
nvd
CVE-2012-0943
2014-05-22 23:55:02
cve
cve
CVE-2012-0943
2014-05-22 23:55:02
CVE-2012-6648
2014-05-22 23:55:03
cvelist
cvelist
CVE-2012-0943
2014-05-22 23:00:00
CVE-2012-6648
2014-05-22 23:00:00
nessus
nessus
Ubuntu 11.10 : lightdm vulnerability (USN-1399-2)
2012-03-14 00:00:00
Ubuntu 10.04 LTS / 10.10 / 11.04 : gdm-guest-session vulnerability (USN-1399-1)
2012-03-14 00:00:00
openvas
openvas
Ubuntu Update for lightdm USN-1399-2
2012-03-16 00:00:00
Ubuntu: Security Advisory (USN-1399-1)
2012-03-16 00:00:00
Ubuntu: Security Advisory (USN-1399-2)
2012-03-16 00:00:00
securityvulns
securityvulns
Light Display Manager / gdm / LTSP Display Manager file descriptor leakage
2012-03-10 00:00:00
ubuntu
ubuntu
Light Display Manager vulnerability
2012-03-13 00:00:00
gdm-guest-session vulnerability
2012-03-13 00:00:00

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON
Related for NVD:CVE-2012-6648
ubuntucve2prion2debiancve1nvd1cve2cvelist2nessus2openvas4securityvulns1ubuntu2