CVE-2013-1495

CVE-2013-1495 affects Oracle Auto Service Request in Oracle Support Tools prior to 4.3.2. It allows a local user to modify arbitrary files via a symlink attack on a predictable /tmp filename. No exploitation details are provided beyond this; remediation is to upgrade to 4.3.2 or later.