CVE-2012-0871
Severity Score
6.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.
La función session_link_x11_socket en login/logind-session.c en systemd-logind en systemd, posiblemente 37 y anteriores, permite a usuarios locales crear o sobrescribir archivos arbitrarios a través de un ataque symlink sobre el directorio de usuario X11 en /run/user/.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-01-19 CVE Reserved
- 2014-04-18 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-59: Improper Link Resolution Before File Access ('Link Following')
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://cgit.freedesktop.org/systemd/systemd/commit/?id=fc3c1c6e091ea16ad5600b145201ec535bbb5d7c | X_refsource_confirm | |
| http://www.osvdb.org/79768 | Vdb Entry | |
| https://bugzilla.novell.com/show_bug.cgi?id=747154 | X_refsource_confirm | |
| https://bugzilla.redhat.com/show_bug.cgi?id=795853 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00030.html | 2022-01-28 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | <= 037 Search vendor "Systemd Project" for product "Systemd" and version " <= 037" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 1 Search vendor "Systemd Project" for product "Systemd" and version "1" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 2 Search vendor "Systemd Project" for product "Systemd" and version "2" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 3 Search vendor "Systemd Project" for product "Systemd" and version "3" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 4 Search vendor "Systemd Project" for product "Systemd" and version "4" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 5 Search vendor "Systemd Project" for product "Systemd" and version "5" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 6 Search vendor "Systemd Project" for product "Systemd" and version "6" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 7 Search vendor "Systemd Project" for product "Systemd" and version "7" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 8 Search vendor "Systemd Project" for product "Systemd" and version "8" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 9 Search vendor "Systemd Project" for product "Systemd" and version "9" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 10 Search vendor "Systemd Project" for product "Systemd" and version "10" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 11 Search vendor "Systemd Project" for product "Systemd" and version "11" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 12 Search vendor "Systemd Project" for product "Systemd" and version "12" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 13 Search vendor "Systemd Project" for product "Systemd" and version "13" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 14 Search vendor "Systemd Project" for product "Systemd" and version "14" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 15 Search vendor "Systemd Project" for product "Systemd" and version "15" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 16 Search vendor "Systemd Project" for product "Systemd" and version "16" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 17 Search vendor "Systemd Project" for product "Systemd" and version "17" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 18 Search vendor "Systemd Project" for product "Systemd" and version "18" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 19 Search vendor "Systemd Project" for product "Systemd" and version "19" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 20 Search vendor "Systemd Project" for product "Systemd" and version "20" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 21 Search vendor "Systemd Project" for product "Systemd" and version "21" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 22 Search vendor "Systemd Project" for product "Systemd" and version "22" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 23 Search vendor "Systemd Project" for product "Systemd" and version "23" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 24 Search vendor "Systemd Project" for product "Systemd" and version "24" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 25 Search vendor "Systemd Project" for product "Systemd" and version "25" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 26 Search vendor "Systemd Project" for product "Systemd" and version "26" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 27 Search vendor "Systemd Project" for product "Systemd" and version "27" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 28 Search vendor "Systemd Project" for product "Systemd" and version "28" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 29 Search vendor "Systemd Project" for product "Systemd" and version "29" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 30 Search vendor "Systemd Project" for product "Systemd" and version "30" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 31 Search vendor "Systemd Project" for product "Systemd" and version "31" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 32 Search vendor "Systemd Project" for product "Systemd" and version "32" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 33 Search vendor "Systemd Project" for product "Systemd" and version "33" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 34 Search vendor "Systemd Project" for product "Systemd" and version "34" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 35 Search vendor "Systemd Project" for product "Systemd" and version "35" | - |
Affected
| ||||||
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | 36 Search vendor "Systemd Project" for product "Systemd" and version "36" | - |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Opensuse Search vendor "Opensuse" for product "Opensuse" | 12.1 Search vendor "Opensuse" for product "Opensuse" and version "12.1" | - |
Affected
| ||||||