CVE-2012-0787

The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files and obtain sensitive information via a bind mount on the (1) .augsave or (2) destination file when using the backup save option, or (3) .augnew file when using the newfile save option.

CVSS v2.0

3.7 LOWAV:L/AC:H/Au:N/C:P/I:P/A:P

EPSS

0.41% chance of exploitation in the next 30 days, 34th percentile

Published

2013-11-23

Updated

2024-08-06

Proof-of-concept exploits (1)

• hercules-team/augeas/commit/b8de6a8c

References

• CVE Record
• NVD entry

Related

• CVE-2025-2588
• CVE-2012-0785
• CVE-2012-0788
• CVE-2012-0782
• CVE-2012-0789
• CVE-2012-0781