CVE-2012-5605 — Incorrect Default Permissions in Redhat Cloudforms

CWE-264CWE-276 — Incorrect Default Permissions6 documents6 sources
Severity
2.1LOWNVD
EPSS
0.1%
top 75.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Redhat Cloudforms
Timeline
PublishedJan 4
Latest updateMay 17

Description

Grinder in Red Hat CloudForms before 1.1 uses world-writable permissions for /var/lib/pulp/cache/grinder/, which allows local users to modify grinder cache files.

CVSS vector

AV:L/AC:L/C:N/I:P/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

â–¶NVDredhat/cloudforms1.0

🔴Vulnerability Details

2
GHSA
GHSA-x2c2-p9xj-wcjm: Grinder in Red Hat CloudForms before 1↗2022-05-17
â–¶
CVEList
CVE-2012-5605: Grinder in Red Hat CloudForms before 1↗2013-01-04
â–¶

💥Exploits & PoCs

1
Exploit-DB
D-Link DCS-5605 Network Surveillance - ActiveX Control 'DcsCliCtrl.dll' lstrcpyW Remote Buffer Overflow↗2012-03-28
â–¶

📋Vendor Advisories

1
Red Hat
CVE-2012-5605: Grinder in Red Hat CloudForms before 1↗2013-01-04
â–¶

💬Community

1
Bugzilla
CVE-2012-5605 CloudForms grinder: /var/lib/pulp/cache/grinder directory is world-writeable↗2012-11-30
â–¶
CVE-2012-5605 — Incorrect Default Permissions in Redhat | cvebase