Lucene search
Ubuntu.comUB:CVE-2012-3500HistorySep 03, 2012 - 12:00 a.m.
CVE-2012-3500
2012-09-0300:00:00
ubuntu.com
ubuntu.com
6
1.2 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:H/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
10.3%
scripts/annotate-output.sh in devscripts before 2.12.2, as used in
rpmdevtools before 8.3, allows local users to modify arbitrary files via a
symlink attack on the temporary (1) standard output or (2) standard error
output file.
Notes
| Author | Note |
|---|---|
| tyhicks | If TMPDIR is not changed, mitigated by yama in Natty and newer |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | devscripts | < 2.10.61ubuntu5.3 | UNKNOWN |
| ubuntu | 11.04 | noarch | devscripts | < 2.10.69ubuntu2.2 | UNKNOWN |
| ubuntu | 11.10 | noarch | devscripts | < 2.11.1ubuntu3.2 | UNKNOWN |
| ubuntu | 12.04 | noarch | devscripts | < 2.11.6ubuntu1.4 | UNKNOWN |
Related
nessus
nessus
Fedora 18 : rpmdevtools-8.3-1.fc18 (2012-13208)
2012-09-18 00:00:00
Fedora 17 : rpmdevtools-8.3-1.fc17 (2012-13234)
2012-09-12 00:00:00
Fedora 16 : rpmdevtools-8.3-1.fc16 (2012-13263)
2012-09-12 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: rpmdevtools-8.3-1.fc16
2012-09-12 00:33:54
[SECURITY] Fedora 17 Update: rpmdevtools-8.3-1.fc17
2012-09-12 00:24:49
[SECURITY] Fedora 18 Update: rpmdevtools-8.3-1.fc18
2012-09-17 23:50:02
cve
cve
CVE-2012-3500
2012-10-01 00:55:01
nvd
nvd
CVE-2012-3500
2012-10-01 00:55:01
openvas
openvas
Fedora Update for rpmdevtools FEDORA-2012-13263
2012-09-17 00:00:00
Fedora Update for rpmdevtools FEDORA-2012-13234
2012-09-17 00:00:00
Fedora Update for rpmdevtools FEDORA-2012-13234
2012-09-17 00:00:00
debiancve
debiancve
CVE-2012-3500
2012-10-01 00:55:01
cvelist
cvelist
CVE-2012-3500
2012-10-01 00:00:00
prion
prion
Design/Logic Flaw
2012-10-01 00:55:00
osv
osv
devscripts - multiple
2012-09-15 00:00:00
debian
debian
[SECURITY] [DSA 2549-1] devscripts security update
2012-09-15 18:09:17
ubuntu
ubuntu
devscripts vulnerabilities
2012-10-02 00:00:00
1.2 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:H/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
10.3%
Related for UB:CVE-2012-3500