CVE-2012-3466 Security feature bypass in n/a
Attackers can bypass passphrase caching limits in GNOME keyring when specific idle or timeout configurations are active, potentially exposing credentials.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-3466?
CVE-2012-3466 is a medium-severity vulnerability in n/a, published on 22 Oct 2012. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
GNOME gnome-keyring 3.4.0 through 3.4.1, when gpg-cache-method is set to "idle" or "timeout," does not properly limit the amount of time a passphrase is cached, which allows attackers to have an unspecified impact via unknown attack vectors.
Weakness: CWE-264
Which versions are affected by CVE-2012-3466?
It affects 1 product.
Products include Gnome Gnome-Keyring.
How do I fix CVE-2012-3466?
Upgrade to a fixed version.
Is CVE-2012-3466 being exploited?
There is no known exploitation of CVE-2012-3466 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2012-3466, GHSA-jr5c-vgqw-77hv, openSUSE-SU-2024:10560-1.