CVE:CVE-2012-0787
CNNVD:CNNVD-201311-357
Augeas是一套用于管理配置文件的工具。该工具通过树形结构来配置修改相应的配置文件，且拥有一个API接口供其他程序调用。
Augeas 1.0.0之前的版本中的transfer.c文件中的‘clone_file’函数中存在安全漏洞，该漏洞源于程序以不安全的权限创建‘.augsave’文件。本地攻击者可通过符号链接攻击利用该漏洞覆盖任意文件并获取敏感信息。
solution:Upgrade redhat enterprise_linux to a higher version than 6.0,and avoid the version 6.0; Upgrade augeas augeas to a higher version than 0.10.0,0.0.1,0.0.2,0.0.3,0.0.4,0.0.5,0.0.6,0.0.7,0.0.8,0.1.0,0.1.1,0.2.0,0.2.1,0.2.2,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.3.6,0.4.0,0.4.1,0.4.2,0.5.0,0.5.1,0.5.2,0.5.3,0.6.0,0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.8.0,0.8.1,0.9.0,and avoid the version (,0.10.0],0.0.1,0.0.2,0.0.3,0.0.4,0.0.5,0.0.6,0.0.7,0.0.8,0.1.0,0.1.1,0.2.0,0.2.1,0.2.2,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.3.6,0.4.0,0.4.1,0.4.2,0.5.0,0.5.1,0.5.2,0.5.3,0.6.0,0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.8.0,0.8.1,0.9.0