CVE-2012-2690
published 2012-06-29CVE-2012-2690: virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when…
PriorityP44low2.1CVSS 2.0
AVLACLAuNCPINAN
EPSS
0.41%
33.4th percentile
virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.
Affected
76 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | libguestfs | < libguestfs 1:1.18.0-1 (bookworm) | libguestfs 1:1.18.0-1 (bookworm) |
| libguestfs | libguestfs | <= 1.17.43 | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
| libguestfs | libguestfs | — | — |
CVSS provenance
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv2.1LOW
vendor_debian2.1LOW
vendor_redhat2.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
libguestfs: virt-edit creates a new file, when it is used leading to loss of file attributes (permissions, owner, SELinux context etc.)
vendor_redhat·2012-02-08·CVSS 2.1
CVE-2012-2690 [LOW] libguestfs: virt-edit creates a new file, when it is used leading to loss of file attributes (permissions, owner, SELinux context etc.)
libguestfs: virt-edit creates a new file, when it is used leading to loss of file attributes (permissions, owner, SELinux context etc.)
virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.
Debian
CVE-2012-2690: libguestfs - virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the...
vendor_debian·2012·CVSS 2.1
CVE-2012-2690 [LOW] CVE-2012-2690: libguestfs - virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the...
virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.
Scope: local
bookworm: resolved (fixed in 1:1.18.0-1)
bullseye: resolved (fixed in 1:1.18.0-1)
forky: resolved (fixed in 1:1.18.0-1)
sid: resolved (fixed in 1:1.18.0-1)
trixie: resolved (fixed in 1:1.18.0-1)
GHSA
GHSA-p84q-fgj5-q47p: virt-edit in libguestfs before 1
ghsa_unreviewed·2022-05-17
CVE-2012-2690 [LOW] GHSA-p84q-fgj5-q47p: virt-edit in libguestfs before 1
virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.
OSV
CVE-2012-2690: virt-edit in libguestfs before 1
osv·2012-06-29·CVSS 2.1
CVE-2012-2690 [LOW] CVE-2012-2690: virt-edit in libguestfs before 1
virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.
No detection rules found.
No public exploits indexed.
http://rhn.redhat.com/errata/RHSA-2012-0774.htmlhttp://secunia.com/advisories/49431http://secunia.com/advisories/49545http://www.securityfocus.com/bid/53932https://exchange.xforce.ibmcloud.com/vulnerabilities/76220https://www.redhat.com/archives/libguestfs/2012-May/msg00104.htmlhttp://rhn.redhat.com/errata/RHSA-2012-0774.htmlhttp://secunia.com/advisories/49431http://secunia.com/advisories/49545http://www.securityfocus.com/bid/53932https://exchange.xforce.ibmcloud.com/vulnerabilities/76220https://www.redhat.com/archives/libguestfs/2012-May/msg00104.html
2012-06-29
Published