CVE-2012-0054 GoLismero symlink attack
LowCVSS 3.3
EPSS 0.28%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files, as demonstrated using Admin/changes.dat.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi golismero(PyPI) | <= 0.6.3 | No fix listed |
| pypi golismero(PyPI) | All versions | No fix listed |
| pypi golismero(PyPI) | = 2.0.3 | No fix listed |
| pypi golismero(PyPI) | = 2.0.3-1 | No fix listed |
| golismero | = 0.6.3 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com product
- github.com
- code.google.com
- [oss-security] 20120117 Re: CVE-request: golismero symlink vulnerability mailing-list
- [oss-security] 20120117 CVE-request: golismero symlink vulnerability mailing-list
- 78472 vdb-entry
- github.com vendor-advisory