CVE-2012-6648

Published: May 22, 2014Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

gdm/guest-session-cleanup.sh in gdm-guest-session 0.24 and earlier, as used in Ubuntu Linux 10.04 LTS, 10.10, and 11.04, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT from CVE-2012-0943 per ADT1/ADT2 due to different codebases and affected versions. CVE-2012-0943 is used for the guest-account issue.

Affected (8)

Products: Canonical: Ubuntu Linux · Gdm Guest Session Project: Gdm Guest Session

Canonical

1 product

Ubuntu Linux

Gdm Guest Session Project

1 product

Gdm Guest Session

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 10.10
Canonical Ubuntu Linux	Version 11.04
Gdm Guest Session Project Gdm Guest Session	Up to 0.24
Gdm Guest Session Project Gdm Guest Session	Version 0.20
Gdm Guest Session Project Gdm Guest Session	Version 0.21
Gdm Guest Session Project Gdm Guest Session	Version 0.22
Gdm Guest Session Project Gdm Guest Session	Version 0.23