CVE-2012-0842
published 2019-11-19CVE-2012-0842: surf: cookie jar has read access from other local user
PriorityP422medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.38%
30.9th percentile
surf: cookie jar has read access from other local user
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | surf | < surf 0.4.1-6 (bookworm) | surf 0.4.1-6 (bookworm) |
| suckless | surf | < 0.5 | 0.5 |
| surf | surf | — | — |
| surf | surf | >= 0 < 0.4.1-6 | 0.4.1-6 |
| surf | surf | >= 0 < 0.4.1-6 | 0.4.1-6 |
| surf | surf | >= 0 < 0.4.1-6 | 0.4.1-6 |
| surf | surf | >= 0 < 0.4.1-6 | 0.4.1-6 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv5.5MEDIUM
vendor_debian5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6fcx-7m99-66c8: surf: cookie jar has read access from other local user
ghsa_unreviewed·2022-04-23
CVE-2012-0842 [LOW] GHSA-6fcx-7m99-66c8: surf: cookie jar has read access from other local user
surf: cookie jar has read access from other local user
OSV
CVE-2012-0842: surf: cookie jar has read access from other local user
osv·2019-11-19·CVSS 5.5
CVE-2012-0842 [MEDIUM] CVE-2012-0842: surf: cookie jar has read access from other local user
surf: cookie jar has read access from other local user
Debian
CVE-2012-0842: surf - surf: cookie jar has read access from other local user
vendor_debian·2012·CVSS 5.5
CVE-2012-0842 [MEDIUM] CVE-2012-0842: surf - surf: cookie jar has read access from other local user
surf: cookie jar has read access from other local user
Scope: local
bookworm: resolved (fixed in 0.4.1-6)
bullseye: resolved (fixed in 0.4.1-6)
forky: resolved (fixed in 0.4.1-6)
sid: resolved (fixed in 0.4.1-6)
trixie: resolved (fixed in 0.4.1-6)
No detection rules found.
No public exploits indexed.
http://www.openwall.com/lists/oss-security/2012/02/10/2http://www.openwall.com/lists/oss-security/2012/02/10/8http://www.openwall.com/lists/oss-security/2012/02/10/9http://www.openwall.com/lists/oss-security/2012/02/11/3https://access.redhat.com/security/cve/cve-2012-0842https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0842https://security-tracker.debian.org/tracker/CVE-2012-0842http://www.openwall.com/lists/oss-security/2012/02/10/2http://www.openwall.com/lists/oss-security/2012/02/10/8http://www.openwall.com/lists/oss-security/2012/02/10/9http://www.openwall.com/lists/oss-security/2012/02/11/3https://access.redhat.com/security/cve/cve-2012-0842https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0842https://security-tracker.debian.org/tracker/CVE-2012-0842
2019-11-19
Published