CVE-2012-2666

golang/go in 1.0.2 fixes all.bash on shared machines. dotest() in src/pkg/debug/gosym/pclntab_test.go creates a temporary file with predicable name and executes it as shell script.

• CWE-377

• https://bugzilla.suse.com/show_bug.cgi?id=765455Issue Tracking, Patch, Third Party Advisory
• https://codereview.appspot.com/5992078Exploit, Third Party Advisory
• https://github.com/golang/go/commit/8ac275bb01588a8c0e6c0fe2de7fd11f08feccddPatch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20210902-0009/Third Party Advisory
• https://www.whitesourcesoftware.com/vulnerability-database/CVE-2012-2666Third Party Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=765455Issue Tracking, Patch, Third Party Advisory
• https://codereview.appspot.com/5992078Exploit, Third Party Advisory
• https://github.com/golang/go/commit/8ac275bb01588a8c0e6c0fe2de7fd11f08feccddPatch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20210902-0009/Third Party Advisory
• https://www.whitesourcesoftware.com/vulnerability-database/CVE-2012-2666Third Party Advisory

Published

Jul 9, 2021

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2660actionpack/lib/action_dispatch/http/request.rb in Ruby on Ra…
• CVE-2012-2661The Active Record component in Ruby on Rails 3.0.x before 3.…
• CVE-2012-2662Multiple cross-site scripting (XSS) vulnerabilities in Red H…
• CVE-2012-2663extensions/libxt_tcp.c in iptables through 1.4.21 does not m…
• CVE-2012-2664The sosreport utility in the Red Hat sos package before 2.2-…
• CVE-2012-2665Multiple heap-based buffer overflows in the XML manifest enc…
• CVE-2012-2667Session fixation vulnerability in lib/user/sfBasicSecurityUs…
• CVE-2012-2668libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and e…
• CVE-2012-2669The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd,…
• CVE-2012-2670manageuser.php in Collabtive before 0.7.6 allows remote auth…
• CVE-2012-2671The Rack::Cache rubygem 0.3.0 through 1.1 caches Set-Cookie …
• CVE-2012-2672Oracle Mojarra 2.1.7 does not properly "clean up" the FacesC…