CVE-2012-2690
libguestfs: virt-edit creates a new file, when it is used leading to loss of file attributes (permissions, owner, SELinux context etc.)
Severity Score
2.1
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.
virt-edit de libguestfs anteriores a 1.18.0 no conserva los permisos del archivo original y guarda el nuevo fichero con permisos de lectura para otros al editar, lo que puede permitir a usuarios locales inviados obtener información confidencial.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-05-14 CVE Reserved
- 2012-06-20 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-255: Credentials Management Errors
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/53932 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/76220 | Vdb Entry | |
| https://www.redhat.com/archives/libguestfs/2012-May/msg00104.html | Mailing List |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://rhn.redhat.com/errata/RHSA-2012-0774.html | 2017-08-29 | |
| http://secunia.com/advisories/49431 | 2017-08-29 | |
| http://secunia.com/advisories/49545 | 2017-08-29 | |
| https://access.redhat.com/security/cve/CVE-2012-2690 | 2012-06-19 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=831117 | 2012-06-19 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | <= 1.17.43 Search vendor "Libguestfs" for product "Libguestfs" and version " <= 1.17.43" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.0 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.0" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.1 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.1" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.2 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.2" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.3 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.3" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.4 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.4" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.5 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.5" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.6 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.6" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.7 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.7" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.8 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.8" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.9 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.9" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.10 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.10" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.11 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.11" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.12 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.12" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.13 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.13" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.14 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.14" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.15 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.15" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.16 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.16" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.17 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.17" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.18 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.18" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.19 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.19" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.20 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.20" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.21 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.21" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.22 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.22" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.23 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.23" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.24 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.24" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.25 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.25" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.16.26 Search vendor "Libguestfs" for product "Libguestfs" and version "1.16.26" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.0 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.0" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.1 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.1" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.2 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.2" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.3 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.3" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.4 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.4" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.5 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.5" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.6 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.6" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.7 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.7" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.8 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.8" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.9 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.9" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.10 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.10" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.11 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.11" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.12 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.12" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.13 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.13" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.14 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.14" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.15 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.15" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.16 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.16" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.17 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.17" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.18 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.18" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.19 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.19" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.20 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.20" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.21 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.21" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.22 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.22" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.23 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.23" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.24 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.24" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.25 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.25" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.26 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.26" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.27 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.27" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.28 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.28" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.29 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.29" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.30 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.30" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.31 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.31" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.32 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.32" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.33 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.33" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.34 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.34" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.35 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.35" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.36 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.36" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.37 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.37" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.38 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.38" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.39 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.39" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.40 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.40" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.41 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.41" | - |
Affected
| ||||||
| Libguestfs Search vendor "Libguestfs" | Libguestfs Search vendor "Libguestfs" for product "Libguestfs" | 1.17.42 Search vendor "Libguestfs" for product "Libguestfs" and version "1.17.42" | - |
Affected
| ||||||