CVE-2012-1088

2014-02-1514:57:07

CWE-59

[email protected]

web.nvd.nist.gov

iproute2

symlink attack

cve-2012-1088

security vulnerability

nvd

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by (1) configure or (2) examples/dhcp-client-script.

Affected configurations

NVD

Node

iproute2_projectiproute2Range≤3.2.0

iproute2_projectiproute2Match3.0.0

iproute2_projectiproute2Match3.1.0

CPENameOperatorVersion
iproute2_project:iproute2iproute2 project iproute2le3.2.0
iproute2_project:iproute2iproute2 project iproute2eq3.0.0
iproute2_project:iproute2iproute2 project iproute2eq3.1.0

CPE	Name	Operator	Version
iproute2_project:iproute2	iproute2 project iproute2	le	3.2.0
iproute2_project:iproute2	iproute2 project iproute2	eq	3.0.0
iproute2_project:iproute2	iproute2 project iproute2	eq	3.1.0