Approved changes feed: RSS · Atom

cpe:2.3:a:augeas:augeas:0.4.2:*:*:*:*:*:*:*

part: a version: 0.4.2 update: *

VendorAugeas (2bc4c7d9-ac11-55d4-bfd9-6e1918869181)
ProductAugeas (a92c01de-0632-552d-8caa-081091936f16)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/augeas purl2cpe 2026-06-01 10:16:15.002451
pkg:deb/ubuntu/augeas purl2cpe 2026-06-01 10:16:15.002452
pkg:github/hercules-team/augeas purl2cpe 2026-06-01 10:16:15.002453
pkg:gitlab/redhat/augeas purl2cpe 2026-06-01 10:16:15.002455
pkg:rpm/centos/augeas purl2cpe 2026-06-01 10:16:15.002456
pkg:rpm/fedora/augeas purl2cpe 2026-06-01 10:16:15.002457
pkg:rpm/opensuse/augeas purl2cpe 2026-06-01 10:16:15.002459

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-6607 vulnerable 2026-06-08 05:03:01.231553 Details available
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augsave file in a backup save action, a different vector than CVE-2012-0786.
Published: 2013-11-23T18:00:00.000Z
Updated: 2024-08-06T21:36:01.447Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0787 vulnerable 2026-06-08 05:00:45.131334 Details available
The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files and obtain sensitive information via a bind mount on the (1) .augsave or (2) destination file when using the backup save option, or (3) .augnew file when using the newfile save option.
Published: 2013-11-23T18:00:00.000Z
Updated: 2024-08-06T18:38:14.202Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0786 vulnerable 2026-06-08 05:00:45.122439 Details available
The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file.
Published: 2013-11-23T18:00:00.000Z
Updated: 2024-08-06T18:38:14.328Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.