Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-1088
HistoryFeb 15, 2014 - 12:00 a.m.

CVE-2012-1088

2014-02-1500:00:00
ubuntu.com
ubuntu.com
7

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%

iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a
symlink attack on a temporary file used by (1) configure or (2)
examples/dhcp-client-script.

Notes

Author Note
tyhicks Issues are in the configure script and an example script, which doesn’t seem to be used anywhere.

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%