CVE-2012-2653 Privilege escalation in n/a
Attackers can gain root privileges by leveraging other vulnerabilities in the arpwatch daemon due to improper dropping of supplementary groups.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-2653?
CVE-2012-2653 is a critical vulnerability in n/a, published on 12 Jul 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabilities in the daemon.
Which versions are affected by CVE-2012-2653?
It affects 1 product.
Products include Lawrence Berkeley National Laboratory Arpwatch.
How do I fix CVE-2012-2653?
Apply the vendor's patch.
Is CVE-2012-2653 being exploited?
There is no known exploitation of CVE-2012-2653 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2012-2653, DSA-2481-1, GHSA-f5c6-h372-fcmp.