Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2012-4480: ovirt mom makes pid files globally writable
CVE-2012-4480 · published 6 years ago
Summary
The mom component in oVirt and Fedora creates its process ID files in /var/run with permissions that allow any user to modify them. This can let unauthorized users interfere with the service or inject malicious code. Apply the latest updates or adjust the file permissions to restrict access to trusted users only.
What to do
- Update ovirt mom to version 0.3.0-1 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ovirt | mom |
< 0.3.0-1 cpe:2.3:a:ovirt:mom:*:*:*:*:*:*:*:* |
| fedoraproject | fedora |
17 18 cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:* |
Original advisory text
mom creates world-writable pid files in /var/run
mom creates world-writable pid files in /var/run
References
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089658.ht... Mailing List Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090188.ht... Mailing List Third Party Advisory
- https://access.redhat.com/security/cve/cve-2012-4480 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4480 Issue Tracking Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79190 Third Party Advisory VDB Entry
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-269Improper Privilege Management
Timeline
Published2 Dec 2019
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2012-4480 · NVD
Track software like this
Free during beta