libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing     directory trees. (CVE-2012-5630)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the libuser packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - libuser 0.56 and 0.57 has a TOCTOU (time-of-check     time-of-use) race condition when copying and removing     directory trees.(CVE-2012-5630)

  - libuser has information disclosure when moving user's     home directory(CVE-2012-5644)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes a TOCTOU race condition when copying and removing directory trees.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
217745	Linux Distros Unpatched Vulnerability : CVE-2012-5630	Nessus	Misc.	medium
137470	EulerOS 2.0 SP2 : libuser (EulerOS-SA-2020-1628)	Nessus	Huawei Local Security Checks	medium
135535	EulerOS 2.0 SP3 : libuser (EulerOS-SA-2020-1406)	Nessus	Huawei Local Security Checks	medium
66006	Fedora 18 : libuser-0.58-3.fc18 (2013-4571)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2012-5630

medium

Tenable Plugins

medium

medium

medium

medium