Lucene search
Ubuntu.comUB:CVE-2012-3440HistoryAug 08, 2012 - 12:00 a.m.
CVE-2012-3440
2012-08-0800:00:00
ubuntu.com
ubuntu.com
6
5.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:N/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL)
5 allows local users to overwrite arbitrary files via a symlink attack on
the /var/tmp/nsswitch.conf.bak temporary file.
Notes
| Author | Note |
|---|---|
| tyhicks | This is a script specific to Red Hat’s sudo package |
Related
nessus
nessus
Oracle Linux 5 : sudo (ELSA-2012-1149)
2013-07-12 00:00:00
CentOS 5 : sudo (CESA-2012:1149)
2012-08-08 00:00:00
RHEL 5 : sudo (RHSA-2012:1149)
2012-08-08 00:00:00
openvas
openvas
RedHat Update for sudo RHSA-2012:1149-01
2012-08-09 00:00:00
CentOS Update for sudo CESA-2012:1149 centos5
2012-08-09 00:00:00
RedHat Update for sudo RHSA-2012:1149-01
2012-08-09 00:00:00
prion
prion
Arbitrary file deletion
2012-08-08 10:26:00
oraclelinux
oraclelinux
sudo security and bug fix update
2012-08-07 00:00:00
redhat
redhat
(RHSA-2012:1149) Moderate: sudo security and bug fix update
2012-08-07 00:00:00
(RHSA-2012:1185) Moderate: rhev-hypervisor5 security and bug fix update
2012-08-21 00:00:00
centos
centos
sudo security update
2012-08-07 17:20:02
veracode
veracode
Arbitrary File Overwrite
2019-01-15 08:55:30
cve
cve
CVE-2012-3440
2012-08-08 10:26:00
debiancve
debiancve
CVE-2012-3440
2012-08-08 10:26:00
vmware
vmware
VMware ESX third party update for Service Console package sudo
2013-05-30 00:00:00
VMware ESX patch address security issues
2013-05-30 00:00:00
5.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:N/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
Related for UB:CVE-2012-3440