libvirt CVE-2012-2693 Multiple Local Security Bypass Vulnerabilities

Bugtraq ID:	54126
Class:	Access Validation Error
CVE:	CVE-2012-2693
Remote:	No
Local:	Yes
Published:	Jun 20 2012 12:00AM
Updated:	Jan 17 2013 12:10PM
Credit:	Red Hat
Vulnerable:	RedHat Enterprise Linux Virtualization 5 server RedHat Enterprise Linux Desktop Multi OS 5 client Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 CentOS CentOS 5
Not Vulnerable:

libvirt CVE-2012-2693 Multiple Local Security Bypass Vulnerabilities

libvirt is prone to multiple local security-bypass vulnerabilities.

Successfully exploiting these issues may allow an attacker to bypass certain security restrictions and gain unauthorized access.

libvirt CVE-2012-2693 Multiple Local Security Bypass Vulnerabilities

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

libvirt CVE-2012-2693 Multiple Local Security Bypass Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

libvirt CVE-2012-2693 Multiple Local Security Bypass Vulnerabilities

References:

• libvirt Homepage (libvirt )