CVE-2012-2653

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1470%

EPSS Percentile9.80th

Published2012年7月12日

Last Modified2026年4月29日

Vulnerability Description

arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabilities in the daemon.

Affected Platforms (CPE)

📦

Lawrence Berkeley National Laboratory

Arpwatch

= 2.1a15

References & Advisories

🔗 http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082553.html

🔗 http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082565.html

🔗 http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082569.html

🔗 http://www.debian.org/security/2012/dsa-2481

🔗 http://www.mandriva.com/security/advisories?name=MDVSA-2012:113

🔗 http://www.openwall.com/lists/oss-security/2012/05/24/12

🔗 http://www.openwall.com/lists/oss-security/2012/05/24/13

🔗 http://www.openwall.com/lists/oss-security/2012/05/24/14

Vulnerability Description

Affected Platforms (CPE)

Arpwatch

References & Advisories

相關漏洞威脅