CVE-2012-5644

MediumCVSS 5.5/10Last modified Jun 16, 2026

Description

libuser has information disclosure when moving user's home directory

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
libuser	libuser	Fixed in 1:0.60

References

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102068.htmlMailing List, Third Party Advisory
https://access.redhat.com/security/cve/cve-2012-5644Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5644Issue Tracking, Patch, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2012-5644Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102068.htmlMailing List, Third Party Advisory
https://access.redhat.com/security/cve/cve-2012-5644Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5644Issue Tracking, Patch, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2012-5644Third Party Advisory

Timeline

Published: Nov 25, 2019
Last modified: Jun 16, 2026
NVD status: Analyzed

Related CVEs from 2012

CVE-2012-56457.5A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker coul CVE-2012-56467.5node-util/www/html/restorer.php in the Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to execute arbitrary commands via a c CVE-2012-56475.8Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to redirec CVE-2012-56487.5Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified para CVE-2012-56496.8Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to execute arbitrary code via a JSONP callba CVE-2012-56504.3Cross-site scripting (XSS) vulnerability in the Futon UI in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows r CVE-2012-56515.0Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive in CVE-2012-56525.0Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result.CVE-2012-56536.0The file upload feature in Drupal 6.x before 6.27 and 7.x before 7.18 allows remote authenticated users to bypass the protection mechanism a CVE-2012-56544.3The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description meta tags from node tex CVE-2012-56555.0The Context module 6.x-3.x before 6.x-3.1 and 7.x-3.x before 7.x-3.0-beta6 for Drupal does not properly restrict access to block content, wh CVE-2012-56565.5The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an