What is the CVSS score of CVE-2012-6110?

CVE-2012-6110 has a CVSS 2.0 base score of 2.1 (Low). CVSS vector: AV:L/AC:L/Au:N/C:N/I:P/A:N. EPSS exploitation probability: 0.1%.

Is there a public PoC exploit available for CVE-2012-6110?

Yes, a public proof-of-concept exploit is available for CVE-2012-6110. Prioritise patching immediately. EPSS: 0.1%.

Bcron Exec CVE-2012-6110

LOW

Permissions, Privileges, and Access Controls (CWE-264)

2014-09-29 secalert@redhat.com

Privilege Escalation Bcron Exec

2.1

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

AV:L/AC:L/Au:N/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:L/Au:N/C:N/I:P/A:N

Attack Vector

Local

Attack Complexity

Low

Confidentiality

None

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Sep 29, 2014 - 22:55 cve.org

LOW 2.1

DescriptionCVE.org

AnalysisAI

bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify job files and send spam messages by. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-264. bcron-exec in bcron before 0.10 does not close file descriptors associated with temporary files when running a cron job, which allows local users to modify job files and send spam messages by accessing an open file descriptor. Affected products include: Bcron Project Bcron Exec. Version information: before 0.10.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.