4.6

CVE-2012-3537

Exploit

EPSS 0.24%
Veröffentlicht 05.09.2012 23:55:02
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secalert@redhat.com
Teams Watchlist Login
Unerledigt Login

The Crowbar Ohai plugin (chef/cookbooks/ohai/files/default/plugins/crowbar.rb) in the Deployer Barclamp in Crowbar, possibly 1.4 and earlier, allows local users to execute arbitrary shell commands via vectors related to "insecure handling of tmp files" and predictable file names.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 13

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Dell ≫ Crowbar Version <= 1.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.24%	0.441

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

http://osvdb.org/84955

http://secunia.com/advisories/50442

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/08/27/5

http://www.openwall.com/lists/oss-security/2012/08/27/7

http://www.securityfocus.com/bid/55240

https://bugzilla.novell.com/show_bug.cgi?id=774967

https://exchange.xforce.ibmcloud.com/vulnerabilities/78041

https://github.com/SUSE-Cloud/barclamp-deployer/commit/5ea8d4ddaa4cb1ce834d36889f0fe7ac0d617bc8

Patch

Exploit

https://github.com/SUSE-Cloud/barclamp-deployer/commit/b6454268a067fc77ff5de82057b5b53b3cc38b87

Patch

Exploit

https://github.com/dellcloudedge/barclamp-deployer/pull/57

https://nvd.nist.gov/vuln/detail/CVE-2012-3537

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-3537

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-3537

EUVD