CVE-2012-0787

The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files and obtain sensitive information via a bind mount on the (1) .augsave or (2) destination file when using the backup save option, or (3) .augnew file when using the newfile save option.

• http://augeas.net/news.html
• http://rhn.redhat.com/errata/RHSA-2013-1537.htmlVendor Advisory
• http://secunia.com/advisories/55811Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=772261Exploit
• https://github.com/hercules-team/augeas/commit/b8de6a8cExploit, Patch
• http://augeas.net/news.html
• http://rhn.redhat.com/errata/RHSA-2013-1537.htmlVendor Advisory
• http://secunia.com/advisories/55811Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=772261Exploit
• https://github.com/hercules-team/augeas/commit/b8de6a8cExploit, Patch

Published

Nov 23, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-0779Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.2…
• CVE-2012-0780Adobe Illustrator before CS6 allows attackers to execute arb…
• CVE-2012-0781The tidy_diagnose function in PHP 5.3.8 might allow remote a…
• CVE-2012-0782Multiple cross-site scripting (XSS) vulnerabilities in wp-ad…
• CVE-2012-0785Hash collision attack vulnerability in Jenkins before 1.447,…7.5
• CVE-2012-0786The transform_save function in transform.c in Augeas before …
• CVE-2012-0788The PDORow implementation in PHP before 5.3.9 does not prope…
• CVE-2012-0789Memory leak in the timezone functionality in PHP before 5.3.…
• CVE-2012-0790Cross-site scripting (XSS) vulnerability in smokeping_cgi in…
• CVE-2012-0791Multiple cross-site scripting (XSS) vulnerabilities in Horde…
• CVE-2012-0792mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remo…
• CVE-2012-0793Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before…