CVE-2012-0860

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2012-0860
Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse (1) deployUtil.py or (2) vds_bootstrap.py Python module in /tmp/.

6.2 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:H/Au:N/C:C/I:C/A:C

Exploitability : 1.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity HIGH

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://rhn.redhat.com/errata/RHSA-2012-1506.html Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2012-1508.html Vendor Advisory
http://www.securityfocus.com/bid/56825
http://www.securitytracker.com/id?1027838
https://bugzilla.redhat.com/show_bug.cgi?id=790730 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/80543
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:redhat:enterprise_virtualization_manager:*:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_virtualization_manager:2.1:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_virtualization_manager:2.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_virtualization_manager:2.2.3:*:*:*:*:*:*:*
History

13 Feb 2023, 03:28

Type Values Removed Values Added
Summary CVE-2012-0860 rhev: vds_installer insecure /tmp use Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse (1) deployUtil.py or (2) vds_bootstrap.py Python module in /tmp/.
References
  • {'url': 'https://access.redhat.com/errata/RHSA-2012:1506', 'name': 'https://access.redhat.com/errata/RHSA-2012:1506', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2012:1508', 'name': 'https://access.redhat.com/errata/RHSA-2012:1508', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/security/cve/CVE-2012-0860', 'name': 'https://access.redhat.com/security/cve/CVE-2012-0860', 'tags': [], 'refsource': 'MISC'}

02 Feb 2023, 18:15

Type Values Removed Values Added
Summary Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse (1) deployUtil.py or (2) vds_bootstrap.py Python module in /tmp/. CVE-2012-0860 rhev: vds_installer insecure /tmp use
References
  • (MISC) https://access.redhat.com/errata/RHSA-2012:1506 -
  • (MISC) https://access.redhat.com/errata/RHSA-2012:1508 -
  • (MISC) https://access.redhat.com/security/cve/CVE-2012-0860 -
Information

Published : 2013-01-04 22:55

Updated : 2023-12-10 11:16

NVD link : CVE-2012-0860

Mitre link : CVE-2012-0860

CVE.ORG link : CVE-2012-0860

JSON object : View

Products Affected

redhat

  • enterprise_virtualization_manager
CWE
NVD-CWE-Other