CVE-2012-2653 arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabi...
HighCVSS 10.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabilities in the daemon.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/arpwatch(Debian:12) | < 2.1a15-1.2 | 2.1a15-1.2 |
| debian/arpwatch(Debian:13) | < 2.1a15-1.2 | 2.1a15-1.2 |
| debian/arpwatch(Debian:14) | < 2.1a15-1.2 | 2.1a15-1.2 |
| lawrence berkeley national laboratory arpwatch | = 2.1a15 | No fix listed |
References
- Debian Security Tracker CVE-2012-2653 vendor-advisory
- FEDORA-2012-8677 vendor-advisory
- FEDORA-2012-8702 vendor-advisory
- FEDORA-2012-8675 vendor-advisory
- DSA-2481 vendor-advisory
- MDVSA-2012:113 vendor-advisory
- [oss-security] 20120524 Re: CVE Request: powerdns does not clear supplementary groups mailing-list
- [oss-security] 20120525 Re: CVE Request: powerdns does not clear supplementary groups mailing-list
- [oss-security] 20120524 Re: CVE Request: powerdns does not clear supplementary groups mailing-list
- [oss-security] 20120525 Re: CVE Request: powerdns does not clear supplementary groups mailing-list
- GLSA-201607-16 vendor-advisory
- bugs.debian.org issue-tracking