Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-3440HistoryAug 08, 2012 - 10:26 a.m.
CVE-2012-3440
2012-08-0810:26:00
Debian Security Bug Tracker
security-tracker.debian.org
11
5.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:N/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | sudo | < 1.9.13p3-1+deb12u1 | sudo_1.9.13p3-1+deb12u1_all.deb |
| Debian | 11 | all | sudo | < 1.9.5p2-3+deb11u1 | sudo_1.9.5p2-3+deb11u1_all.deb |
| Debian | 10 | all | sudo | < 1.8.27-1+deb10u3 | sudo_1.8.27-1+deb10u3_all.deb |
| Debian | 999 | all | sudo | < 1.9.15p5-3 | sudo_1.9.15p5-3_all.deb |
| Debian | 13 | all | sudo | < 1.9.15p5-3 | sudo_1.9.15p5-3_all.deb |
Related
openvas
openvas
CentOS Update for sudo CESA-2012:1149 centos5
2012-08-09 00:00:00
RedHat Update for sudo RHSA-2012:1149-01
2012-08-09 00:00:00
Oracle: Security Advisory (ELSA-2012-1149)
2015-10-06 00:00:00
prion
prion
Arbitrary file deletion
2012-08-08 10:26:00
oraclelinux
oraclelinux
sudo security and bug fix update
2012-08-07 00:00:00
redhat
redhat
(RHSA-2012:1149) Moderate: sudo security and bug fix update
2012-08-07 00:00:00
(RHSA-2012:1185) Moderate: rhev-hypervisor5 security and bug fix update
2012-08-21 00:00:00
centos
centos
sudo security update
2012-08-07 17:20:02
nessus
nessus
RHEL 5 : sudo (RHSA-2012:1149)
2012-08-08 00:00:00
Scientific Linux Security Update : sudo on SL5.x i386/x86_64 (20120808)
2012-08-09 00:00:00
Oracle Linux 5 : sudo (ELSA-2012-1149)
2013-07-12 00:00:00
veracode
veracode
Arbitrary File Overwrite
2019-01-15 08:55:30
ubuntucve
ubuntucve
CVE-2012-3440
2012-08-08 00:00:00
cve
cve
CVE-2012-3440
2012-08-08 10:26:00
vmware
vmware
VMware ESX third party update for Service Console package sudo
2013-05-30 00:00:00
VMware ESX patch address security issues
2013-05-30 00:00:00
5.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:N/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
Related for DEBIANCVE:CVE-2012-3440