CVE-2012-5578

Advisory

Python keyring has insecure permissions on new databases allowing world-readable files to be created. See: CVE-2012-5578.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Python keyring has insecure permissions on new databases allowing world-readable files to be created


DEBIAN:Debian: https://security-tracker.debian.org/tracker/CVE-2012-5578
MISC:http://www.openwall.com/lists/oss-security/2012/11/27/4: http://www.openwall.com/lists/oss-security/2012/11/27/4
MISC:https://bugs.launchpad.net/ubuntu/+source/python-keyring/+bug/1031465: https://bugs.launchpad.net/ubuntu/+source/python-keyring/+bug/1031465
MISC:https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5578: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5578
MISC:https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-5578: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-5578
REDHAT:Red Hat: https://access.redhat.com/security/cve/cve-2012-5578

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5578
• https://bugs.launchpad.net/ubuntu/+source/python-keyring/+bug/1031465
• https://access.redhat.com/security/cve/cve-2012-5578
• https://security-tracker.debian.org/tracker/CVE-2012-5578
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-5578
• http://www.openwall.com/lists/oss-security/2012/11/27/4
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5578