The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors.

Multiple race conditions were discovered in augeas when saving configuration files which expose it to symlink attacks. Write access to the directory where the configuration file is located is required by the attacker.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Augeas has been updated to fix a symlink overwrite problem.
(CVE-2012-0786 / CVE-2013-6412)

Also a bug has been fixed where 'augtool -s set was failing'.
(bnc#876044)

Additionally parsing the multipath configuration has been fixed.
bnc#871323

Update to Augeas 1.2.0 :

  - resolves CVE-2013-6412

    - changelog:
      https://github.com/hercules-team/augeas/blob/master/NE       WS

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A flaw was found in the way Augeas handled certain umask settings when creating new configuration files. This flaw could result in configuration files being created as world-writable, allowing unprivileged local users to modify their content. (CVE-2013-6412)

Updated augeas packages fix security vulnerabilities :

Multiple flaws were found in the way Augeas handled configuration files when updating them. An application using Augeas to update configuration files in a directory that is writable to by a different user (for example, an application running as root that is updating files in a directory owned by a non-root service user) could have been tricked into overwriting arbitrary files or leaking information via a symbolic link or mount point attack (CVE-2012-0786, CVE-2012-0787).

A flaw was found in the way Augeas handled certain umask settings when creating new configuration files. This flaw could result in configuration files being created as world-writable, allowing unprivileged local users to modify their content (CVE-2013-6412).

A flaw was found in the way Augeas handled certain umask settings when creating new configuration files. This flaw could result in configuration files being created as world-writable, allowing unprivileged local users to modify their content. (CVE-2013-6412)

All running applications using augeas must be restarted for the update to take effect.

Updated augeas packages that fix one security issue are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Augeas is a utility for editing configuration. Augeas parses configuration files in their native formats and transforms them into a tree. Configuration changes are made by manipulating this tree and saving it back into native configuration files. Augeas also uses 'lenses' as basic building blocks for establishing the mapping from files into the Augeas tree and back.

A flaw was found in the way Augeas handled certain umask settings when creating new configuration files. This flaw could result in configuration files being created as world-writable, allowing unprivileged local users to modify their content. (CVE-2013-6412)

This issue was discovered by the Red Hat Security Response Team.

All augeas users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. All running applications using augeas must be restarted for the update to take effect.

From Red Hat Security Advisory 2014:0044 :

Updated augeas packages that fix one security issue are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Augeas is a utility for editing configuration. Augeas parses configuration files in their native formats and transforms them into a tree. Configuration changes are made by manipulating this tree and saving it back into native configuration files. Augeas also uses 'lenses' as basic building blocks for establishing the mapping from files into the Augeas tree and back.

A flaw was found in the way Augeas handled certain umask settings when creating new configuration files. This flaw could result in configuration files being created as world-writable, allowing unprivileged local users to modify their content. (CVE-2013-6412)

This issue was discovered by the Red Hat Security Response Team.

All augeas users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. All running applications using augeas must be restarted for the update to take effect.

ID	Name	Product	Family	Severity
82176	Debian DLA-28-1 : augeas security update	Nessus	Debian Local Security Checks	medium
77196	SuSE 11.3 Security Update : augeas (SAT Patch Number 9574)	Nessus	SuSE Local Security Checks	medium
73032	Fedora 20 : augeas-1.2.0-1.fc20 (2014-2452)	Nessus	Fedora Local Security Checks	medium
73031	Fedora 19 : augeas-1.2.0-1.fc19 (2014-2445)	Nessus	Fedora Local Security Checks	medium
72304	Amazon Linux AMI : augeas (ALAS-2014-286)	Nessus	Amazon Linux Local Security Checks	medium
72134	Mandriva Linux Security Advisory : augeas (MDVSA-2014:022)	Nessus	Mandriva Local Security Checks	medium
72083	Scientific Linux Security Update : augeas on SL6.x i386/x86_64 (20140120)	Nessus	Scientific Linux Local Security Checks	medium
72060	RHEL 6 : augeas (RHSA-2014:0044)	Nessus	Red Hat Local Security Checks	medium
72058	Oracle Linux 6 : augeas (ELSA-2014-0044)	Nessus	Oracle Linux Local Security Checks	medium
72045	CentOS 6 : augeas (CESA-2014:0044)	Nessus	CentOS Local Security Checks	medium

Detections

Analytics

CVE-2013-6412

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium