CVE-2012-2451 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2012-2451 Interim 1 20 2025-11-05T05:38:24Z current 2021-05-30T13:03:48Z 2025-11-05T05:38:24Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2012-2451 The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack. NOTE: some of these details are obtained from third party information. NOTE: it has been reported that this might only be exploitable by writing in the same directory as the .ini file. If this is the case, then this issue might not cross privilege boundaries. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 openSUSE Tumbleweed perl-Config-IniFiles-2.82-3.12 perl-Config-IniFiles-2.82-3.14 perl-Config-IniFiles-2.94-1.1 perl-Config-IniFiles-2.94-1.23 perl-Config-IniFiles-3.000003-160000.2.2 perl-Config-IniFiles-2.82-3.14 as a component of SUSE Linux Enterprise Desktop 12 perl-Config-IniFiles-2.82-3.14 as a component of SUSE Linux Enterprise Desktop 12 SP1 perl-Config-IniFiles-2.82-3.14 as a component of SUSE Linux Enterprise Desktop 12 SP2 perl-Config-IniFiles-2.82-3.14 as a component of SUSE Linux Enterprise Desktop 12 SP3 perl-Config-IniFiles-2.82-3.14 as a component of SUSE Linux Enterprise Desktop 12 SP4 perl-Config-IniFiles-2.82-3.14 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 perl-Config-IniFiles-2.94-1.23 as a component of SUSE Linux Enterprise Module for Development Tools 15 perl-Config-IniFiles-2.94-1.23 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 perl-Config-IniFiles-2.94-1.23 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP2 perl-Config-IniFiles-2.94-1.23 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 perl-Config-IniFiles-2.94-1.23 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 perl-Config-IniFiles-2.94-1.23 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 perl-Config-IniFiles-2.94-1.23 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 perl-Config-IniFiles-2.94-1.23 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 perl-Config-IniFiles-2.82-3.14 as a component of SUSE Linux Enterprise Server 12 perl-Config-IniFiles-2.82-3.14 as a component of SUSE Linux Enterprise Server 12 SP1 perl-Config-IniFiles-2.82-3.14 as a component of SUSE Linux Enterprise Server 12 SP2 perl-Config-IniFiles-2.82-3.14 as a component of SUSE Linux Enterprise Server 12 SP3 perl-Config-IniFiles-2.82-3.14 as a component of SUSE Linux Enterprise Server 12 SP4 perl-Config-IniFiles-2.82-3.14 as a component of SUSE Linux Enterprise Server 12 SP5 perl-Config-IniFiles-3.000003-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 perl-Config-IniFiles-2.82-3.12 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 perl-Config-IniFiles-2.82-3.14 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 perl-Config-IniFiles-2.94-1.1 as a component of openSUSE Tumbleweed The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack. NOTE: some of these details are obtained from third party information. NOTE: it has been reported that this might only be exploitable by writing in the same directory as the .ini file. If this is the case, then this issue might not cross privilege boundaries. CVE-2012-2451 SUSE Linux Enterprise Desktop 12:perl-Config-IniFiles-2.82-3.14 SUSE Linux Enterprise Desktop 12 SP1:perl-Config-IniFiles-2.82-3.14 SUSE Linux Enterprise Desktop 12 SP2:perl-Config-IniFiles-2.82-3.14 SUSE Linux Enterprise Desktop 12 SP3:perl-Config-IniFiles-2.82-3.14 SUSE Linux Enterprise Desktop 12 SP4:perl-Config-IniFiles-2.82-3.14 SUSE Linux Enterprise High Performance Computing 12 SP5:perl-Config-IniFiles-2.82-3.14 SUSE Linux Enterprise Module for Development Tools 15:perl-Config-IniFiles-2.94-1.23 SUSE Linux Enterprise Module for Development Tools 15 SP1:perl-Config-IniFiles-2.94-1.23 SUSE Linux Enterprise Module for Development Tools 15 SP2:perl-Config-IniFiles-2.94-1.23 SUSE Linux Enterprise Module for Development Tools 15 SP3:perl-Config-IniFiles-2.94-1.23 SUSE Linux Enterprise Module for Development Tools 15 SP4:perl-Config-IniFiles-2.94-1.23 SUSE Linux Enterprise Module for Development Tools 15 SP5:perl-Config-IniFiles-2.94-1.23 SUSE Linux Enterprise Module for Development Tools 15 SP6:perl-Config-IniFiles-2.94-1.23 SUSE Linux Enterprise Module for Development Tools 15 SP7:perl-Config-IniFiles-2.94-1.23 SUSE Linux Enterprise Server 12:perl-Config-IniFiles-2.82-3.14 SUSE Linux Enterprise Server 12 SP1:perl-Config-IniFiles-2.82-3.14 SUSE Linux Enterprise Server 12 SP2:perl-Config-IniFiles-2.82-3.14 SUSE Linux Enterprise Server 12 SP3:perl-Config-IniFiles-2.82-3.14 SUSE Linux Enterprise Server 12 SP4:perl-Config-IniFiles-2.82-3.14 SUSE Linux Enterprise Server 12 SP5:perl-Config-IniFiles-2.82-3.14 SUSE Linux Enterprise Server 16.0:perl-Config-IniFiles-3.000003-160000.2.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:perl-Config-IniFiles-2.82-3.12 SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-Config-IniFiles-2.82-3.14 openSUSE Tumbleweed:perl-Config-IniFiles-2.94-1.1 low 3.6 AV:L/AC:L/Au:N/C:N/I:P/A:P