Lucene search
HistoryDec 19, 2012 - 11:55 a.m.
CVE-2012-3329
ibm
asu
bomc
linux
symlink attack
file overwrite
security vulnerability
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
IBM Advanced Settings Utility (ASU) through 3.62 and 3.70 through 9.21 and Bootable Media Creator (BoMC) through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a (1) temporary file or (2) log file.
Affected configurations
Node
ibmadvanced_settings_utilityMatch3.62
ORibmadvanced_settings_utilityMatch3.70
ORibmadvanced_settings_utilityMatch9.21
ORibmbootable_media_creatorMatch2.30
ORibmbootable_media_creatorMatch3.00
ORibmbootable_media_creatorMatch9.21
linuxlinux_kernel
Related
prion
prion
Code injection
2012-12-19 11:55:00
nvd
nvd
CVE-2012-3329
2012-12-19 11:55:54
cvelist
cvelist
CVE-2012-3329
2012-12-19 11:00:00
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2012-3329