CVE-2012-2690

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2012-2690

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2012-2690.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2012-2690

Downstream

DEBIAN-CVE-2012-2690

RHSA-2012:0774

Published

2012-06-29T19:55:04Z

Modified

2026-04-10T03:43:11.048465Z

Summary

[none]

Details

virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.

References

http://rhn.redhat.com/errata/RHSA-2012-0774.html
http://secunia.com/advisories/49431
http://secunia.com/advisories/49545
http://www.securityfocus.com/bid/53932
https://exchange.xforce.ibmcloud.com/vulnerabilities/76220
https://www.redhat.com/archives/libguestfs/2012-May/msg00104.html

CVE-2012-2690

Affected packages