CVE-2012-4518

LowCVSS 3.6/10Last modified Jun 16, 2026

Description

ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ib_acm daemon log or ibacm.port file.

Metrics

CVSS 2.0 3.6/10AV:L/AC:L/Au:N/C:N/I:P/A:P

Weakness enumeration

CWE-264

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Oct 22, 2012
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-45196.1Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS.CVE-2012-45206.4The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and diCVE-2012-45225.0The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackersCVE-2012-45236.4radsecproxy before 1.6.1 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to thCVE-2012-45247.5xlockmore before 5.43 'dclock' security bypass vulnerabilityCVE-2012-45256.1piwigo has XSS in password.phpCVE-2012-45266.1piwigo has XSS in password.php (incomplete fix for CVE-2012-4525)CVE-2012-45276.8Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service (crash) and possiCVE-2012-45285.0The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data toCVE-2012-45294.3The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE,CVE-2012-45302.1The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local usersCVE-2012-45314.3Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via un
CVE-2012-4518: Low severity, CVSS 3.6 | Vulnix