CVE-2012-6097 - Vulnerability Details - OpenCVE

Description

File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab.

Published: 2013-04-09

Score: 4.3 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

No analysis available yet.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

n/a

n/a

affected

Version	Status	Constraints
`n/a`	affected	—

Configuration 1 [-]

cpe:2.3:a:fedorahosted:cronie:1.4.8:*:*:*:*:*:*:*

No data.

No data available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
EUVD	EUVD-2012-5967	File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00319.

Key SSVC decision points have not yet been added.

References

Link	Providers
http://www.mandriva.com/security/advisories?name=MDVSA-2013:033
https://bugs.mageia.org/show_bug.cgi?id=8652
https://bugzilla.novell.com/show_bug.cgi?id=786096
https://bugzilla.redhat.com/show_bug.cgi?id=893661
https://nvd.nist.gov/vuln/detail/CVE-2012-6097
https://www.cve.org/CVERecord?id=CVE-2012-6097

History

No history.

Subscriptions

Fedorahosted Cronie

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2013-04-09T20:00:00.000Z

Updated: 2024-09-16T18:29:45.189Z

Reserved: 2012-12-06T00:00:00.000Z

Link: CVE-2012-6097

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2013-04-09T20:55:01.427

Modified: 2025-04-11T00:51:21.963

Link: CVE-2012-6097

Redhat

Severity : Low

Publid Date: 2012-10-22T00:00:00Z

Links: CVE-2012-6097 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

CWE-200

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2013-04-09T20:00:00.000Z", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.novell.com/show_bug.cgi?id=786096"}, {"name": "MDVSA-2013:033", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:033"}, {"tags": ["x_refsource_MISC"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=893661"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugs.mageia.org/show_bug.cgi?id=8652"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2012-6097", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://bugzilla.novell.com/show_bug.cgi?id=786096", "refsource": "CONFIRM", "url": "https://bugzilla.novell.com/show_bug.cgi?id=786096"}, {"name": "MDVSA-2013:033", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:033"}, {"name": "https://bugzilla.redhat.com/show_bug.cgi?id=893661", "refsource": "MISC", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=893661"}, {"name": "https://bugs.mageia.org/show_bug.cgi?id=8652", "refsource": "CONFIRM", "url": "https://bugs.mageia.org/show_bug.cgi?id=8652"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T21:28:38.974Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.novell.com/show_bug.cgi?id=786096"}, {"name": "MDVSA-2013:033", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:033"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=893661"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugs.mageia.org/show_bug.cgi?id=8652"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2012-6097", "datePublished": "2013-04-09T20:00:00.000Z", "dateReserved": "2012-12-06T00:00:00.000Z", "dateUpdated": "2024-09-16T18:29:45.189Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:fedorahosted:cronie:1.4.8:*:*:*:*:*:*:*", "matchCriteriaId": "6D773760-C55C-4934-B673-BD9E1620942B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab."}, {"lang": "es", "value": "Un agujero en el descriptor de fichero de cronie v1.4.8, cuando funcionan en ciertos entornos, podr\u00eda permitir a usuarios locales leer archivos restringidos, como se demostr\u00f3 con la lectura de /etc/crontab."}], "id": "CVE-2012-6097", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2013-04-09T20:55:01.427", "references": [{"source": "secalert@redhat.com", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:033"}, {"source": "secalert@redhat.com", "url": "https://bugs.mageia.org/show_bug.cgi?id=8652"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.novell.com/show_bug.cgi?id=786096"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=893661"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:033"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugs.mageia.org/show_bug.cgi?id=8652"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugzilla.novell.com/show_bug.cgi?id=786096"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=893661"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}