CVE-2012-0786

The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.

References

Affected packages

Debian:11 / augeas

Package

Name: augeas
Purl: pkg:deb/debian/augeas?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.0-1

Ecosystem specific

{
    "urgency": "low"
}

Debian:12 / augeas

Package

Name: augeas
Purl: pkg:deb/debian/augeas?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.0-1

Ecosystem specific

{
    "urgency": "low"
}

Debian:13 / augeas

Package

Name: augeas
Purl: pkg:deb/debian/augeas?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.0-1

Ecosystem specific

{
    "urgency": "low"
}