{"id":"CVE-2012-0787","aliases":["DEBIAN-CVE-2012-0787","DLA-28-1","EUVD-2012-0818","GHSA-8qr9-h3xv-vhx6","MGASA-2014-0058","RHSA-2013:1537"],"status":"published","title":"The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set...","description":"The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files and obtain sensitive information via a bind mount on the (1) .augsave or (2) destination file when using the backup save option, or (3) .augnew file when using the newfile save option.","severity":{"version":"2.0","score":3.7,"vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00417,"percentile":0.36216,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2013-11-23T18:00:00Z","modified":"2026-10-23T17:47:35Z","fixes":[{"ecosystem":"Debian:12","package":"augeas","fixed_in":["1.0.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"augeas","fixed_in":["1.0.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"augeas","fixed_in":["1.0.0-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.2-1+deb6u1"}]}],"versions":["0.7.2-1"],"bundled":3},{"source":"osv","ecosystem":"Mageia:3","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-1.1.mga3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"augeas-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"augeas-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"augeas-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"augeas-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"augeas-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"augeas-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"augeas-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"augeas-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"augeas-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"augeas-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"augeas-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"augeas-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"augeas-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"augeas-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el6"}]}],"bundled":2}],"products":[{"vendor":"augeas","product":"augeas"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"http://secunia.com/advisories/55811","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://augeas.net/news.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=772261","tags":["x_refsource_CONFIRM","x_transferred","Exploit","evidence","report"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1537.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://github.com/hercules-team/augeas/commit/b8de6a8c","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","evidence","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0787","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8qr9-h3xv-vhx6"},{"url":"https://security-tracker.debian.org/tracker/CVE-2012-0787","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0058.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=11721","tags":["report"]},{"url":"https://rhn.redhat.com/errata/RHSA-2013-1537.html","tags":["web"]},{"url":"https://rhn.redhat.com/errata/RHSA-2014-0044.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1537","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=772257","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=826752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=855022","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1537.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0786","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0786","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0786","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0787","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0787","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2012-0787","description":"The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files and obtain sensitive information via a bind mount on the (1) .augsave or (2) destination file when using the backup save option, or (3) .augnew file when using the newfile save option.","status":"published","published":"2013-11-23T18:00:00Z","modified":"2024-08-06T18:38:14.202Z","updated_at":"2026-11-02T14:34:52.638543Z"}],"euvd":[{"id":"EUVD-2012-0818","description":"The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files and obtain sensitive information via a bind mount on the (1) .augsave or (2) destination file when using the backup save option, or (3) .augnew file when using the newfile save option.","status":"published","published":"2013-11-23T18:00:00Z","modified":"2024-08-06T18:38:14Z","updated_at":"2026-11-03T01:56:20.258269Z"}],"ghsa":[{"id":"GHSA-8qr9-h3xv-vhx6","title":"The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set...","description":"The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files and obtain sensitive information via a bind mount on the (1) .augsave or (2) destination file when using the backup save option, or (3) .augnew file when using the newfile save option.","status":"published","published":"2022-05-14T01:08:01Z","modified":"2023-02-02T05:03:00Z","updated_at":"2026-11-02T14:51:33.40906Z"}],"nvd":[{"id":"CVE-2012-0787","description":"The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files and obtain sensitive information via a bind mount on the (1) .augsave or (2) destination file when using the backup save option, or (3) .augnew file when using the newfile save option.","status":"published","published":"2013-11-23T18:55:04.093Z","modified":"2026-06-16T23:38:15.597Z","cvss":[{"version":"2.0","score":3.7,"vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:02:17.375282Z"}],"osv":[{"id":"CVE-2012-0787","description":"The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files and obtain sensitive information via a bind mount on the (1) .augsave or (2) destination file when using the backup save option, or (3) .augnew file when using the newfile save option.","status":"published","published":"2013-11-23T18:55:04Z","modified":"2026-04-16T06:23:42.47158152Z","updated_at":"2026-11-02T15:43:58.537032Z"},{"id":"DEBIAN-CVE-2012-0787","description":"The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files and obtain sensitive information via a bind mount on the (1) .augsave or (2) destination file when using the backup save option, or (3) .augnew file when using the newfile save option.","status":"published","published":"2013-11-23T18:55:04.093Z","modified":"2026-10-23T17:47:35.696525714Z","updated_at":"2026-11-02T15:45:24.92418Z"},{"id":"DLA-28-1","title":"augeas - security update","status":"published","published":"2014-08-01T00:00:00Z","modified":"2026-03-09T01:23:00.806289Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2014-0058","title":"Updated augeas package fixes security vulnerabilities","description":"Multiple flaws were found in the way Augeas handled configuration files\nwhen updating them. An application using Augeas to update configuration\nfiles in a directory that is writable to by a different user (for example,\nan application running as root that is updating files in a directory owned\nby a non-root service user) could have been tricked into overwriting\narbitrary files or leaking information via a symbolic link or mount point\nattack (CVE-2012-0786, CVE-2012-0787).\n\nA flaw was found in the way Augeas handled certain umask settings when\ncreating new configuration files. This flaw could result in configuration\nfiles being created as world writable, allowing unprivileged local users to\nmodify their content (CVE-2013-6412).\n","status":"published","published":"2014-02-12T17:10:49Z","modified":"2026-04-16T06:26:10.049403304Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"RHSA-2013:1537","title":"Red Hat Security Advisory: augeas security, bug fix, and enhancement update","status":"published","published":"2024-09-15T20:54:58Z","modified":"2026-06-26T12:21:45.378177007Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}