CVE-2012-5638

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content…

published December 20, 2012

CVSS
—
EPSS
0%
Percentile
25.4
In the wild
Unconfirmed
What it is

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00335 · 25.4th percentile
Published
2012-12-20T11:00Z
EPSS history
Timeline
  • 20 DEC 11:00Z
    The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content…
    cvelistv5