CVE-2012-3475 - Vulnerability Details - OpenCVE

The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administrative privileges via unspecified vectors.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00519.

Key SSVC decision points have not yet been added.

Vendors	Products
Ushahidi	Ushahidi Platform

Configuration 1 [-]

OR	cpe:2.3:a:ushahidi:ushahidi_platform::::::::
	cpe:2.3:a:ushahidi:ushahidi_platform:1.0:::::::*
	cpe:2.3:a:ushahidi:ushahidi_platform:1.2:::::::*
	cpe:2.3:a:ushahidi:ushahidi_platform:2.0:::::::*
	cpe:2.3:a:ushahidi:ushahidi_platform:2.1:::::::*
	cpe:2.3:a:ushahidi:ushahidi_platform:2.2:::::::*
	cpe:2.3:a:ushahidi:ushahidi_platform:2.2.1:::::::*
	cpe:2.3:a:ushahidi:ushahidi_platform:2.3.1:::::::*
	cpe:2.3:a:ushahidi:ushahidi_platform:2.3.2:::::::*
	cpe:2.3:a:ushahidi:ushahidi_platform:2.4:::::::*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2012-3431	The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administrative privileges via unspecified vectors.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://openwall.com/lists/oss-security/2012/08/09/5
https://github.com/ushahidi/Ushahidi_Web/commit/7892559
https://github.com/ushahidi/Ushahidi_Web/commit/fcdad03

History

No history.

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2012-08-12T21:00:00Z

Updated: 2024-09-17T00:55:34.320Z

Reserved: 2012-06-14T00:00:00Z

Link: CVE-2012-3475

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2012-08-12T21:55:01.700

Modified: 2025-04-11T00:51:21.963

Link: CVE-2012-3475

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administrative privileges via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2012-08-12T21:00:00Z", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"name": "[oss-security] 20120809 Re: CVE request for Ushahidi", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://openwall.com/lists/oss-security/2012/08/09/5"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/ushahidi/Ushahidi_Web/commit/7892559"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/ushahidi/Ushahidi_Web/commit/fcdad03"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2012-3475", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administrative privileges via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "[oss-security] 20120809 Re: CVE request for Ushahidi", "refsource": "MLIST", "url": "http://openwall.com/lists/oss-security/2012/08/09/5"}, {"name": "https://github.com/ushahidi/Ushahidi_Web/commit/7892559", "refsource": "CONFIRM", "url": "https://github.com/ushahidi/Ushahidi_Web/commit/7892559"}, {"name": "https://github.com/ushahidi/Ushahidi_Web/commit/fcdad03", "refsource": "CONFIRM", "url": "https://github.com/ushahidi/Ushahidi_Web/commit/fcdad03"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T20:05:12.668Z"}, "title": "CVE Program Container", "references": [{"name": "[oss-security] 20120809 Re: CVE request for Ushahidi", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://openwall.com/lists/oss-security/2012/08/09/5"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/ushahidi/Ushahidi_Web/commit/7892559"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/ushahidi/Ushahidi_Web/commit/fcdad03"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2012-3475", "datePublished": "2012-08-12T21:00:00Z", "dateReserved": "2012-06-14T00:00:00Z", "dateUpdated": "2024-09-17T00:55:34.320Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:*:*:*:*:*:*:*:*", "matchCriteriaId": "984B26E4-C672-46DF-B26B-8CAAEDBDFEB0", "versionEndIncluding": "2.4.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "86468BDD-17C2-49CC-A488-F38CC8630979", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:1.2:*:*:*:*:*:*:*", "matchCriteriaId": "E8EBC5A6-4FB0-4385-8299-5D6298977534", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "826225E4-F4F8-4FB6-AFAF-23CD6720CE5E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "6754F1ED-E827-433C-8F50-71F04293EEB1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:2.2:*:*:*:*:*:*:*", "matchCriteriaId": "7B1BC250-09BC-4051-ABEE-8B8FE1558279", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:2.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "5D260CD2-5483-48D2-87B9-C0298F5F2B23", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:2.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "489F7397-CF33-42C5-AF46-956D5692C6D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:2.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "B1C84D59-409A-4E73-A65A-8B12594B61DF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ushahidi:ushahidi_platform:2.4:*:*:*:*:*:*:*", "matchCriteriaId": "8A004E65-AFA7-4551-BA2B-8EF9450B0684", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administrative privileges via unspecified vectors."}, {"lang": "es", "value": "El instalador de la plataforma Ushahidi antes de v2.5 omite ciertas llamadas a la funci\u00f3n exit, lo que permite a atacantes remotos obtener privilegios administrativos a trav\u00e9s de vectores no especificados.\r\n"}], "id": "CVE-2012-3475", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2012-08-12T21:55:01.700", "references": [{"source": "secalert@redhat.com", "url": "http://openwall.com/lists/oss-security/2012/08/09/5"}, {"source": "secalert@redhat.com", "tags": ["Patch"], "url": "https://github.com/ushahidi/Ushahidi_Web/commit/7892559"}, {"source": "secalert@redhat.com", "tags": ["Patch"], "url": "https://github.com/ushahidi/Ushahidi_Web/commit/fcdad03"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://openwall.com/lists/oss-security/2012/08/09/5"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/ushahidi/Ushahidi_Web/commit/7892559"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/ushahidi/Ushahidi_Web/commit/fcdad03"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}