CyberSec.Space Logo
Back to CVE Browser

CVE-2012-2653

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1470%
EPSS Percentile9.80th
PublishedJul 12, 2012
Last ModifiedApr 29, 2026

Vulnerability Description

arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabilities in the daemon.

Affected Platforms (CPE)

📦
Lawrence Berkeley National Laboratory

Arpwatch

= 2.1a15

References & Advisories

🔗 http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082553.html
🔗 http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082565.html
🔗 http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082569.html
🔗 http://www.debian.org/security/2012/dsa-2481
🔗 http://www.mandriva.com/security/advisories?name=MDVSA-2012:113
🔗 http://www.openwall.com/lists/oss-security/2012/05/24/12
🔗 http://www.openwall.com/lists/oss-security/2012/05/24/13
🔗 http://www.openwall.com/lists/oss-security/2012/05/24/14

Related Vulnerabilities

CVE-2021-253217.8

A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Serve...

CVE-2001-01401.2

arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...