CVE-2012-3453 logol 1.5.0 uses world writable permissions for the /var/lib/logol/results directory, which allows local users to delete or overwrite arbitrary files.
LowCVSS 3.6
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
logol 1.5.0 uses world writable permissions for the /var/lib/logol/results directory, which allows local users to delete or overwrite arbitrary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/logol(Debian:12) | < 1.5.0-4 | 1.5.0-4 |
| debian/logol | = 1.5.0 | No fix listed |
References
- Debian Security Tracker CVE-2012-3453 vendor-advisory
- bugs.debian.org
- [oss-security] 20120803 CVE ASSIGNMENT: logol: creates world writable directory: /var/lib/logol/results mailing-list
- 54802 vdb-entry
- bugs.debian.org issue-tracking