Vulnerability Details : CVE-2012-2653
arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabilities in the daemon.
Products affected by CVE-2012-2653
- cpe:2.3:a:lawrence_berkeley_national_laboratory:arpwatch:2.1a15:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-2653
1.13%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 83 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-2653
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
References for CVE-2012-2653
-
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082569.html
[SECURITY] Fedora 16 Update: arpwatch-2.1a15-18.fc16
-
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082565.html
[SECURITY] Fedora 15 Update: arpwatch-2.1a15-16.fc15
-
http://www.mandriva.com/security/advisories?name=MDVSA-2012:113
mandriva.com
-
http://www.openwall.com/lists/oss-security/2012/05/24/14
oss-security - Re: CVE Request: powerdns does not clear supplementary groups
-
http://www.openwall.com/lists/oss-security/2012/05/25/5
oss-security - Re: CVE Request: powerdns does not clear supplementary groups
-
https://security.gentoo.org/glsa/201607-16
arpwatch: Privilege escalation (GLSA 201607-16) — Gentoo security
-
http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082553.html
[SECURITY] Fedora 17 Update: arpwatch-2.1a15-20.fc17
-
http://www.openwall.com/lists/oss-security/2012/05/24/13
oss-security - Re: CVE Request: powerdns does not clear supplementary groups
-
http://www.openwall.com/lists/oss-security/2012/05/24/12
oss-security - Re: CVE Request: powerdns does not clear supplementary groups
-
http://www.debian.org/security/2012/dsa-2481
Debian -- Security Information -- DSA-2481-1 arpwatch
Jump to