CVE-2012-5697 The btinstall installation script in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 uses weak permissions (777) for all files in the frameworkgui/ directory, which allows local users to...
MediumCVSS 4.6
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The btinstall installation script in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 uses weak permissions (777) for all files in the frameworkgui/ directory, which allows local users to obtain sensitive information or inject arbitrary Perl code via direct access to these files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bulbsecurity smartphone pentest framework | <= 0.1.2 | No fix listed |
References
- 51415 third-party-advisory
- twitter.com vendor-advisory
- www.htbridge.com exploit