CVE-2012-5619

The Sleuth Kit 4.0.1 - Forensic Activity Hiding via Dotfile Handling

Title source: llm
STIX 2.1

Description

The Sleuth Kit (TSK) 4.0.1 does not properly handle "." (dotfile) file system entries in FAT file systems and other file systems for which . is not a reserved name, which allows local users to hide activities it more difficult to conduct forensics activities, as demonstrated by Flame.

References (7)

Core 7
Core References
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/12/04/2
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=883330
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097293.html
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2013:125
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097289.html
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/12/01/2

Scores

EPSS 0.0035
EPSS Percentile 27.4%

Details

CWE
CWE-20
Status published
Products (1)
sleuthkit/the_sleuth_kit 4.0.1
Published Sep 29, 2014
Tracked Since Feb 18, 2026