CVE:CVE-2012-2690
CNNVD:CNNVD-201206-179
LibguestFS是软件开发者Richard Jones所开发的一套开源的用于访问和修改虚拟机磁盘映像文件的工具。
libguestfs中存在敏感信息泄露漏洞，该漏洞源于在虚拟机图像中编辑文件时"virt-edit"实用程序未保持原有的文件权限。攻击者可利用该漏洞设置world-readable权限。Libguestfs 1.16.4版本中存在该漏洞，其他版本也可能受到影响。
solution:Upgrade libguestfs libguestfs to a higher version than 1.17.43,1.16.0,1.16.1,1.16.2,1.16.3,1.16.4,1.16.5,1.16.6,1.16.7,1.16.8,1.16.9,1.16.10,1.16.11,1.16.12,1.16.13,1.16.14,1.16.15,1.16.16,1.16.17,1.16.18,1.16.19,1.16.20,1.16.21,1.16.22,1.16.23,1.16.24,1.16.25,1.16.26,1.17.0,1.17.1,1.17.2,1.17.3,1.17.4,1.17.5,1.17.6,1.17.7,1.17.8,1.17.9,1.17.10,1.17.11,1.17.12,1.17.13,1.17.14,1.17.15,1.17.16,1.17.17,1.17.18,1.17.19,1.17.20,1.17.21,1.17.22,1.17.23,1.17.24,1.17.25,1.17.26,1.17.27,1.17.28,1.17.29,1.17.30,1.17.31,1.17.32,1.17.33,1.17.34,1.17.35,1.17.36,1.17.37,1.17.38,1.17.39,1.17.40,1.17.41,1.17.42,and avoid the version (,1.17.43],1.16.0,1.16.1,1.16.2,1.16.3,1.16.4,1.16.5,1.16.6,1.16.7,1.16.8,1.16.9,1.16.10,1.16.11,1.16.12,1.16.13,1.16.14,1.16.15,1.16.16,1.16.17,1.16.18,1.16.19,1.16.20,1.16.21,1.16.22,1.16.23,1.16.24,1.16.25,1.16.26,1.17.0,1.17.1,1.17.2,1.17.3,1.17.4,1.17.5,1.17.6,1.17.7,1.17.8,1.17.9,1.17.10,1.17.11,1.17.12,1.17.13,1.17.14,1.17.15,1.17.16,1.17.17,1.17.18,1.17.19,1.17.20,1.17.21,1.17.22,1.17.23,1.17.24,1.17.25,1.17.26,1.17.27,1.17.28,1.17.29,1.17.30,1.17.31,1.17.32,1.17.33,1.17.34,1.17.35,1.17.36,1.17.37,1.17.38,1.17.39,1.17.40,1.17.41,1.17.42