CVE-2012-3419 Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments.
MediumCVSS 5.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/pcp(Debian:12) | < 3.6.5 | 3.6.5 |
| debian/pcp(Debian:13) | < 3.6.5 | 3.6.5 |
| debian/pcp(Debian:14) | < 3.6.5 | 3.6.5 |
| sgi performance co-pilot | <= 3.6.4 | No fix listed |
| sgi performance co-pilot | = 2.1.1 | No fix listed |
| sgi performance co-pilot | = 2.1.2 | No fix listed |
| sgi performance co-pilot | = 2.1.3 | No fix listed |
| sgi performance co-pilot | = 2.1.4 | No fix listed |
| sgi performance co-pilot | = 2.1.5 | No fix listed |
| sgi performance co-pilot | = 2.1.6 | No fix listed |
| sgi performance co-pilot | = 2.1.7 | No fix listed |
| sgi performance co-pilot | = 2.1.8 | No fix listed |
| sgi performance co-pilot | = 2.1.9 | No fix listed |
| sgi performance co-pilot | = 2.1.10 | No fix listed |
| sgi performance co-pilot | = 2.2 | No fix listed |
References
- Debian Security Tracker CVE-2012-3419 vendor-advisory
- FEDORA-2012-12024 vendor-advisory
- FEDORA-2012-12076 vendor-advisory
- SUSE-SU-2013:0190 vendor-advisory
- oss.sgi.com
- DSA-2533 vendor-advisory
- [oss-security] 20120816 pcp: Multiple security flaws mailing-list
- bugzilla.redhat.com
- openSUSE-SU-2012:1036 vendor-advisory
- openSUSE-SU-2012:1079 vendor-advisory
- openSUSE-SU-2012:1081 vendor-advisory
- bugs.debian.org issue-tracking