CVE:CVE-2012-6607
CNNVD:CNNVD-201311-358
Augeas是一套用于管理配置文件的工具。该工具通过树形结构来配置修改相应的配置文件，且拥有一个API接口供其他程序调用。
Augeas 1.0.0之前的版本中的‘transform_save’函数中存在安全漏洞。本地攻击者可通过在备份保存操作期间对‘.augsave’文件实施符号链接攻击，利用该漏洞覆盖任意文件并获取敏感信息。
solution:Upgrade augeas augeas to a higher version than 0.10.0,0.0.1,0.0.2,0.0.3,0.0.4,0.0.5,0.0.6,0.0.7,0.0.8,0.1.0,0.1.1,0.2.0,0.2.1,0.2.2,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.3.6,0.4.0,0.4.1,0.4.2,0.5.0,0.5.1,0.5.2,0.5.3,0.6.0,0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.8.0,0.8.1,0.9.0,and avoid the version (,0.10.0],0.0.1,0.0.2,0.0.3,0.0.4,0.0.5,0.0.6,0.0.7,0.0.8,0.1.0,0.1.1,0.2.0,0.2.1,0.2.2,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.3.6,0.4.0,0.4.1,0.4.2,0.5.0,0.5.1,0.5.2,0.5.3,0.6.0,0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.8.0,0.8.1,0.9.0