CVE-2012-0786

Advisory

The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0786
• http://secunia.com/advisories/55811
• https://github.com/hercules-team/augeas/commit/16387744
• https://bugzilla.redhat.com/show_bug.cgi?id=772257
• http://augeas.net/news.html
• http://rhn.redhat.com/errata/RHSA-2013-1537.html