Bug 534382

Summary:	<app-forensics/sleuthkit-4.0.2: Improper handling of FAT file system entries (CVE-2012-5619)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	minor	CC:	forensics+obsolete
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B4 [noglsa]
Package list:		Runtime testing required:	---

Description GLSAMaker/CVETool Bot gentoo-dev

2015-01-02 22:41:15 UTC

CVE-2012-5619 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5619):
  The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file
  system entries in FAT file systems and other file systems for which . is not
  a reserved name, which allows local users to hide activities it more
  difficult to conduct forensics activities, as demonstrated by Flame.


Maintainers, please drop the vulnerable version (4.0.1). Thanks

Comment 1 Manuel Rüger (RETIRED) gentoo-dev

2015-08-28 00:14:57 UTC

Vulnerable removed.

Security: Please vote.

Comment 2 Stefan Behte (RETIRED) gentoo-dev

2015-11-09 22:05:32 UTC

Vote: NO.

Comment 3 Yury German Gentoo Infrastructure

2015-12-31 04:46:19 UTC

GLSA Vote: No
Thank you all. Closing as noglsa.