PT-2012-4726

CVE-2012-3453

·

Published

2012-08-07

·

Updated

2012-08-08

Description by

CVSS 2.0
3.6
Low
MetricsAV:L/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions logol version 1.5.0
Description The issue allows local users to delete or overwrite arbitrary files due to world writable permissions for the /var/lib/logol/results directory.
Recommendations For logol version 1.5.0, consider changing the permissions of the /var/lib/logol/results directory to prevent world writability as a temporary workaround until a patch is available. Restrict access to the /var/lib/logol/results directory to minimize the risk of exploitation.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾