CVE-2012-1174 The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files...
LowCVSS 3.3
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/systemd(Debian:12) | < 44-1 | 44-1 |
| debian/systemd(Debian:13) | < 44-1 | 44-1 |
| debian/systemd(Debian:14) | < 44-1 | 44-1 |
| linux systemd | = 43 | No fix listed |
References
- Debian Security Tracker CVE-2012-1174 vendor-advisory
- cgit.freedesktop.org exploit patch
- FEDORA-2012-6456 vendor-advisory
- MDVSA-2012:030 vendor-advisory
- [oss-security] 20120316 [Notification] CVE-2012-1174 systemd: TOCTOU race condition by removing user session mailing-list
- bugzilla.redhat.com
- bugs.debian.org issue-tracking