Home

CVE-2012-0878

Description

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
1.239

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2012-0878 are fixed in Python-paste 1.7.5.1Windows
Vulnerabilities CVE-2012-0878 are fixed in Python-pastescript 2.0.1Windows
Python-paste-script update (CESA-2012:1206) python-paste-script-1.7.3-5.el6_3.noarch.rpmLinux
(RHSA-2012:1206) Moderate: python-paste-script security update python-paste-script-1.7.3-5.el6_3.noarch.rpmLinux
Python-paste-script update (ELSA-2012-1206) python-paste-script-1.7.3-5.el6_3.noarch.rpmLinux
Vulnerabilities CVE-2012-0878 are fixed in Python-paste for linux 1.7.5.1Linux
Vulnerabilities CVE-2012-0878 are fixed in Python-pastescript for linux 2.0.1Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234