CVE-2012-5577

EUVD-2019-0070
Python keyring lib before 0.10 created keyring files with world-readable permissions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
Affected Products (NVD)
VendorProductVersion
pythonkeyring
𝑥
< 0.10
debiandebian_linux
7.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
python-keyring
bookworm
23.9.3-2
fixed
bullseye
22.0.1-1
fixed
sid
25.4.1-1
fixed
squeeze
no-dsa
trixie
25.4.1-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
python-keyring
hardy
dne
lucid
ignored
oneiric
Fixed 0.9.2-0ubuntu0.11.10.2
released
precise
Fixed 0.9.2-0ubuntu0.12.04.2
released
quantal
Fixed 0.9.2-1ubuntu0.2
released
raring
Fixed 0.9.2-1ubuntu2
released
saucy
Fixed 0.9.2-1ubuntu2
released
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2012/11/27/3
https://bitbucket.org/kang/python-keyring-lib/commits/049cd181470f1ee6c540e1d64acf1def7b1de0c1
https://bitbucket.org/kang/python-keyring-lib/issue/67/set-go-rwx-on-keyring_passcfg
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5577
https://security-tracker.debian.org/tracker/CVE-2012-5577
http://www.openwall.com/lists/oss-security/2012/11/27/3
https://bitbucket.org/kang/python-keyring-lib/commits/049cd181470f1ee6c540e1d64acf1def7b1de0c1
https://bitbucket.org/kang/python-keyring-lib/issue/67/set-go-rwx-on-keyring_passcfg
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5577
https://security-tracker.debian.org/tracker/CVE-2012-5577