Lucene search
AmazonALAS-2012-064HistoryApr 05, 2012 - 12:51 p.m.
Low: iproute
2012-04-0512:51:00
alas.aws.amazon.com
9
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
0.0004 Low
EPSS
Percentile
5.1%
Issue Overview:
iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by (1) configure or (2) examples/dhcp-client-script.
Affected Packages:
iproute
Issue Correction:
Run yum update iproute to update your system.
New Packages:
i686:
iproute-doc-3.2.0-3.7.amzn1.i686
iproute-devel-3.2.0-3.7.amzn1.i686
iproute-3.2.0-3.7.amzn1.i686
iproute-debuginfo-3.2.0-3.7.amzn1.i686
src:
iproute-3.2.0-3.7.amzn1.src
x86_64:
iproute-doc-3.2.0-3.7.amzn1.x86_64
iproute-devel-3.2.0-3.7.amzn1.x86_64
iproute-debuginfo-3.2.0-3.7.amzn1.x86_64
iproute-3.2.0-3.7.amzn1.x86_64
Additional References
Red Hat: CVE-2012-1088
Mitre: CVE-2012-1088
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Amazon Linux | 1 | i686 | iproute-doc | < 3.2.0-3.7.amzn1 | iproute-doc-3.2.0-3.7.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | iproute-devel | < 3.2.0-3.7.amzn1 | iproute-devel-3.2.0-3.7.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | iproute | < 3.2.0-3.7.amzn1 | iproute-3.2.0-3.7.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | iproute-debuginfo | < 3.2.0-3.7.amzn1 | iproute-debuginfo-3.2.0-3.7.amzn1.i686.rpm |
| Amazon Linux | 1 | x86_64 | iproute-doc | < 3.2.0-3.7.amzn1 | iproute-doc-3.2.0-3.7.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | iproute-devel | < 3.2.0-3.7.amzn1 | iproute-devel-3.2.0-3.7.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | iproute-debuginfo | < 3.2.0-3.7.amzn1 | iproute-debuginfo-3.2.0-3.7.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | iproute | < 3.2.0-3.7.amzn1 | iproute-3.2.0-3.7.amzn1.x86_64.rpm |
Related
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2012-64)
2015-09-08 00:00:00
Fedora Update for iproute FEDORA-2012-3068
2012-03-26 00:00:00
Fedora Update for iproute FEDORA-2012-2818
2012-08-30 00:00:00
ubuntucve
ubuntucve
CVE-2012-1088
2014-02-15 00:00:00
cve
cve
CVE-2012-1088
2014-02-15 14:57:07
fedora
fedora
[SECURITY] Fedora 17 Update: iproute-3.2.0-3.fc17
2012-03-21 19:02:21
[SECURITY] Fedora 16 Update: iproute-2.6.39-5.fc16
2012-03-24 00:35:05
[SECURITY] Fedora 15 Update: iproute-2.6.38.1-6.fc15
2012-03-24 00:24:22
prion
prion
Code injection
2014-02-15 14:57:00
nessus
nessus
Fedora 17 : iproute-3.2.0-3.fc17 (2012-2818)
2012-03-22 00:00:00
Fedora 15 : iproute-2.6.38.1-6.fc15 (2012-3068)
2012-03-26 00:00:00
Fedora 16 : iproute-2.6.39-5.fc16 (2012-3008)
2012-03-26 00:00:00
cvelist
cvelist
CVE-2012-1088
2014-02-15 11:00:00
nvd
nvd
CVE-2012-1088
2014-02-15 14:57:07
securityvulns
securityvulns
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
0.0004 Low
EPSS
Percentile
5.1%
Related for ALAS-2012-064