CVE-2012-5619 Other in n/a

Low 2.1 Published 29 Sep 2014 Updated 6 Aug 2024

Attackers can hide files in FAT file systems by exploiting improper dotfile handling, hindering forensic analysis.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2012-5619?

CVE-2012-5619 is a low-severity vulnerability in n/a, published on 29 Sep 2014. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file systems and other file systems for which . is not a reserved name, which allows local users to hide activities it more difficult to conduct forensics activities, as demonstrated by Flame.

Weakness: CWE-20

Which versions are affected by CVE-2012-5619?

It affects 1 product.

Products include Sleuthkit the Sleuth Kit.

How do I fix CVE-2012-5619?

Upgrade to a fixed version.

Is CVE-2012-5619 being exploited?

There is no known exploitation of CVE-2012-5619 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2012-5619, GHSA-4wj6-2665-qg48, UBUNTU-CVE-2012-5619.