Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-vwxc-3cfr-37jq
Advisory ID github_osv/GHSA-vwxc-3cfr-37jq
Aliases CVE-2012-0054
Summary GoLismero symlink attack libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files, as demonstrated using Admin/changes.dat.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-59 Improper Link Resolution Before File Access ('Link Following')
System Score Found at
generic_textual LOW
Reference id Reference type URL
http://code.google.com/p/golismero/source/detail?r=2b3bb43d68676efd687361f7de29380189031ab8
https://github.com/golismero/golismero
https://github.com/pypa/advisory-database/tree/main/vulns/golismero/PYSEC-2012-31.yaml
http://www.openwall.com/lists/oss-security/2012/01/17/10
http://www.openwall.com/lists/oss-security/2012/01/17/7
CVE-2012-0054 https://nvd.nist.gov/vuln/detail/CVE-2012-0054
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.