CVE-2012-5619 The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file systems and other file systems for which . is not a reserved name, which allows local users to hide ac...
LowCVSS 2.1
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file systems and other file systems for which . is not a reserved name, which allows local users to hide activities it more difficult to conduct forensics activities, as demonstrated by Flame.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/sleuthkit(Debian:12) | < 4.1.2-1 | 4.1.2-1 |
| debian/sleuthkit(Debian:13) | < 4.1.2-1 | 4.1.2-1 |
| debian/sleuthkit(Debian:14) | < 4.1.2-1 | 4.1.2-1 |
| sleuthkit the sleuth kit | = 4.0.1 | No fix listed |
References
- Debian Security Tracker CVE-2012-5619 vendor-advisory
- labs.bitdefender.com
- FEDORA-2013-0320 vendor-advisory
- FEDORA-2013-0336 vendor-advisory
- MDVSA-2013:125 vendor-advisory
- [oss-security] 20121201 CVE request: TSK misrepresents "." files on FAT filesystems mailing-list
- [oss-security] 20121203 Re: CVE request: TSK misrepresents "." files on FAT filesystems mailing-list
- bugzilla.redhat.com
- bugs.debian.org issue-tracking