CVE-2012-2690

libguestfs: virt-edit creates a new file, when it is used leading to loss of file attributes (permissions, owner, SELinux context etc.)

Published Jun 29, 2012 CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Description
virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-2672 virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 7:42 PM
Reserved
May 14, 2012, 12:00 AM
Status
Modified
Published
Jun 29, 2012, 7:55 PM
Modified
Jun 16, 2026, 11:41 PM
Severity
Low
Public date
Feb 8, 2012, 12:00 AM