CVE-2012-0427
UnknownEPSS 0.49%
Last modified
CVE-2012-0427 is a vulnerability of currently unknown severity. yast2-add-on-creator in SUSE inst-source-utils 2008.11.26 before 2008.11.26-0.9.1 and 2012.9.13 before 2012.9.13-0.8.1 allows local users to gain privileges via a crafted (1) file name or (2) directory name.. EPSS estimates a 0.49% chance of exploitation in the next 30 days.
Description
yast2-add-on-creator in SUSE inst-source-utils 2008.11.26 before 2008.11.26-0.9.1 and 2012.9.13 before 2012.9.13-0.8.1 allows local users to gain privileges via a crafted (1) file name or (2) directory name.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Opensuse | Opensuse | 11.4 |
References
- https://support.novell.com/security/cve/CVE-2012-0427.htmlVendor Advisory
- https://support.novell.com/security/cve/CVE-2012-0427.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-0427?
yast2-add-on-creator in SUSE inst-source-utils 2008.11.26 before 2008.11.26-0.9.1 and 2012.9.13 before 2012.9.13-0.8.1 allows local users to gain privileges via a crafted (1) file name or (2) directory name.
How severe is CVE-2012-0427?
Severity scoring for CVE-2012-0427 is pending analysis. The EPSS model estimates a 0.49% probability of exploitation in the next 30 days.
How do I fix CVE-2012-0427?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-0418Unspecified vulnerability in the client in Novell GroupWise …
- CVE-2012-0419Directory traversal vulnerability in the agent HTTP interfac…
- CVE-2012-0420zypp-refresh-wrapper in SUSE Zypper before 1.3.20 and 1.6.x …
- CVE-2012-0421The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SU…
- CVE-2012-0425LanItems.ycp in save_y2logs in yast2-network before 2.24.4 i…
- CVE-2012-0426Race condition in sap_suse_cluster_connector before 1.0.0-0.…
- CVE-2012-0428Cross-site scripting (XSS) vulnerability in NetIQ eDirectory…
- CVE-2012-0429dhost in NetIQ eDirectory 8.8.6.x before 8.8.6.7 and 8.8.7.x…
- CVE-2012-0430Unspecified vulnerability in NetIQ eDirectory 8.8.6.x before…
- CVE-2012-0432Stack-based buffer overflow in the Novell NCP implementation…
- CVE-2012-0433The install-chef-suse.sh script shipped with crowbar before …3.3
- CVE-2012-0434The server in Crowbar, as used in SUSE Cloud 1.0, uses weak …
Are you affected by CVE-2012-0427?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST