CVE-2012-3419

Published: Aug 27, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments.

Affected (12)

Products: Sgi: Performance Co Pilot

1 product

Performance Co Pilot

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Sgi Performance Co Pilot	version ≤ 3.6.4
Sgi Performance Co Pilot	Version 2.1.10
Sgi Performance Co Pilot	Version 2.1.1
Sgi Performance Co Pilot	Version 2.1.2
Sgi Performance Co Pilot	Version 2.1.3
Sgi Performance Co Pilot	Version 2.1.4
Sgi Performance Co Pilot	Version 2.1.5
Sgi Performance Co Pilot	Version 2.1.6
Sgi Performance Co Pilot	Version 2.1.7
Sgi Performance Co Pilot	Version 2.1.8
Sgi Performance Co Pilot	Version 2.1.9
Sgi Performance Co Pilot	Version 2.2

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (20)

http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html

Source: secalert@redhat.com

http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=blob%3Bf=CHANGELOG%3Bh=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5%3Bhb=fe51067ae869a4d59f350ac319b09edcb77ac8e6

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2533

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/08/16/1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=841702

Source: secalert@redhat.com

https://hermes.opensuse.org/messages/15471040

Source: secalert@redhat.com

https://hermes.opensuse.org/messages/15540133

Source: secalert@redhat.com

https://hermes.opensuse.org/messages/15540172

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=blob%3Bf=CHANGELOG%3Bh=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5%3Bhb=fe51067ae869a4d59f350ac319b09edcb77ac8e6

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2012/dsa-2533

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/08/16/1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=841702

Source: af854a3a-2127-422b-91ae-364da2661108

https://hermes.opensuse.org/messages/15471040

Source: af854a3a-2127-422b-91ae-364da2661108

https://hermes.opensuse.org/messages/15540133

Source: af854a3a-2127-422b-91ae-364da2661108

https://hermes.opensuse.org/messages/15540172

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.