Design/Logic Flaw

2013-03-1821:55:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.5%

JSON

asr in Oracle Auto Service Request in Oracle Support Tools before 4.3.2 allows local users to modify arbitrary files via a symlink attack on a predictable filename in /tmp.

CPENameOperatorVersion
support_toolsle4.3.2

CPE	Name	Operator	Version
	support_tools	le	4.3.2

References

seclists.org/fulldisclosure/2013/Feb/159

www.mandriva.com/security/advisories?name=MDVSA-2013:150

www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html