Lucene search
HistoryMar 18, 2013 - 9:55 p.m.
CVE-2013-1495
cve
2013
1495
oracle
auto service request
symlink attack
vulnerability
nvd
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.1 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
26.7%
asr in Oracle Auto Service Request in Oracle Support Tools before 4.3.2 allows local users to modify arbitrary files via a symlink attack on a predictable filename in /tmp.
Affected configurations
Node
oraclesupport_toolsRange≤4.3.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| oracle:support_tools | oracle support tools | le | 4.3.2 |
Related
nvd
nvd
CVE-2013-1495
2013-03-18 21:55:01
cvelist
cvelist
CVE-2013-1495
2013-03-18 21:00:00
prion
prion
Design/Logic Flaw
2013-03-18 21:55:00
securityvulns
securityvulns
oracle
oracle
Oracle Critical Patch Update - April 2013
2013-04-16 00:00:00
6.9 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
6.1 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
26.7%
Related for CVE-2013-1495