Staging Environment: Content and features may be unstable or change without notice.
Advisory details: pysec / PYSEC-2012-31
Advisory ID pysec/PYSEC-2012-31
Aliases CVE-2012-0054
GHSA-vwxc-3cfr-37jq
Summary libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files, as demonstrated using Admin/changes.dat.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
There are no known severity scores.
Reference id Reference type URL
http://code.google.com/p/golismero/source/detail?r=2b3bb43d68676efd687361f7de29380189031ab8
http://www.openwall.com/lists/oss-security/2012/01/17/10
http://www.openwall.com/lists/oss-security/2012/01/17/7
http://www.osvdb.org/78472
GHSA-vwxc-3cfr-37jq https://github.com/advisories/GHSA-vwxc-3cfr-37jq

No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.

There are no known vectors.

There are no SSVC decisions available.