Lucene search

K
prionPRIOn knowledge basePRION:CVE-2012-3440
HistoryAug 08, 2012 - 10:26 a.m.

Arbitrary file deletion

2012-08-0810:26:00
PRIOn knowledge base
www.prio-n.com
2

6.6 Medium

AI Score

Confidence

Low

5.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:N/I:C/A:C

0.0004 Low

EPSS

Percentile

5.4%

A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file.

CPENameOperatorVersion
enterprise_linuxeq5
sudoeq1.7.2

6.6 Medium

AI Score

Confidence

Low

5.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:N/I:C/A:C

0.0004 Low

EPSS

Percentile

5.4%