CVE-2012-5578

Python keyring has insecure permissions on new databases allowing world-readable files to be created
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.2 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 11%
VendorProductVersion
pythonkeyring
𝑥
≤ 0.10
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
python-keyring
bullseye
22.0.1-1
fixed
squeeze
no-dsa
bookworm
23.9.3-2
fixed
sid
25.4.1-1
fixed
trixie
25.4.1-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
python-keyring
saucy
Fixed 0.9.2-1ubuntu2
released
raring
Fixed 0.9.2-1ubuntu2
released
quantal
Fixed 0.9.2-1ubuntu0.2
released
precise
Fixed 0.9.2-0ubuntu0.12.04.2
released
oneiric
Fixed 0.9.2-0ubuntu0.11.10.2
released
lucid
ignored
hardy
dne
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2012/11/27/4
https://access.redhat.com/security/cve/cve-2012-5578
https://bugs.launchpad.net/ubuntu/+source/python-keyring/+bug/1031465
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5578
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-5578
https://security-tracker.debian.org/tracker/CVE-2012-5578
http://www.openwall.com/lists/oss-security/2012/11/27/4
https://access.redhat.com/security/cve/cve-2012-5578
https://bugs.launchpad.net/ubuntu/+source/python-keyring/+bug/1031465
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5578
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-5578
https://security-tracker.debian.org/tracker/CVE-2012-5578