CVE-2012-4576

HighCVSS 7.8/10Last modified Jun 16, 2026

Description

FreeBSD: Input Validation Flaw allows local users to gain elevated privileges

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
FreeBSD	FreeBSD	7.4; 8.3; 9.0; and 9.1

References

http://archives.neohapsis.com/archives/bugtraq/2012-11/0089.htmlBroken Link
http://www.securityfocus.com/bid/56654Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1027809Third Party Advisory, VDB Entry
https://access.redhat.com/security/cve/cve-2012-4576Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/80321Third Party Advisory, VDB Entry
https://security-tracker.debian.org/tracker/CVE-2012-4576Third Party Advisory
http://archives.neohapsis.com/archives/bugtraq/2012-11/0089.htmlBroken Link
http://www.securityfocus.com/bid/56654Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1027809Third Party Advisory, VDB Entry
https://access.redhat.com/security/cve/cve-2012-4576Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/80321Third Party Advisory, VDB Entry
https://security-tracker.debian.org/tracker/CVE-2012-4576Third Party Advisory

Timeline

Published: Dec 2, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-457710.0The Linux firmware image on (1) Korenix Jetport 5600 series serial-device servers and (2) ORing Industrial DIN-Rail serial-device servers ha CVE-2012-45782.1The geli encryption provider 7 before r239184 on FreeBSD 10 uses a weak Master Key, which makes it easier for local users to defeat a crypto CVE-2012-45793.5Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary CVE-2012-45804.3Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Em CVE-2012-45816.8McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does n CVE-2012-45824.9McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows CVE-2012-45834.0McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows CVE-2012-45843.5McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does n CVE-2012-45854.0McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows CVE-2012-45863.5McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, access CVE-2012-45873.5McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode is enabled, have an CVE-2012-45884.3McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1 record all invalid usernames presented in failed login atte