Vulnerability in Gdm-Guest-Session Project
CVE-2012-6648
gdm/guest-session-cleanup.sh in gdm-guest-session 0.24 and earlier, as used in Ubuntu Linux 10.04 LTS, 10.10, and 11.04, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT from CVE-2012-0943 per ADT1/ADT2 due to different codebases and affected versions. CVE-2012-0943 is used for the guest-account issue.
EPSS: 0.004 (30.3th percentile) — read the EPSS interpretation.
Affected products
- Gdm-guest-session_project Gdm-guest-session — versions 0.20, 0.21, 0.22
- Canonical Ubuntu_linux — versions 10.04, 10.10, 11.04
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_UBUNTU, vendor-advisory, Patch, Vendor Advisory)