libuser CVE-2012-5630 Symlink Attack Local Security Bypass Vulnerability

Bugtraq ID:	59285
Class:	Boundary Condition Error
CVE:	CVE-2012-5630
Remote:	No
Local:	Yes
Published:	Mar 28 2013 12:00AM
Updated:	Apr 16 2015 05:42PM
Credit:	Florian Weimer of Red Hat Product Security Team
Vulnerable:	libuser libuser 0.57 libuser libuser 0.56
Not Vulnerable:

libuser CVE-2012-5630 Symlink Attack Local Security Bypass Vulnerability

libuser is prone to a local security-bypass vulnerability.

Local attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions.

libuser CVE-2012-5630 Symlink Attack Local Security Bypass Vulnerability

Attackers can use standard commands to exploit this issue.

libuser CVE-2012-5630 Symlink Attack Local Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

libuser CVE-2012-5630 Symlink Attack Local Security Bypass Vulnerability

References: