ubuntu · CVE-2012-3492

Quick triage

Priority: low Published: 2012-09-28 17:55:00 UTC Updated: 2024-07-24 15:57:39 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2012-3492 low priority: Ubuntu including 1 source packages (condor), 9 status rows across 9 suites (hardy, lucid, natty, oneiric, precise, quantal, raring, saucy, upstream): ignored 3, not-affected 3, DNE 2, needs-triage 1.

Description:

The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a user's authentication directory.

cvelogic Threat Intelligence