CVE-2012-3329 in Bootable Media Creator

Summary

IBM Advanced Settings Utility (ASU) through 3.62 and 3.70 through 9.21 and Bootable Media Creator (BoMC) through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a (1) temporary file or (2) log file.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 06/07/2012
• Disclosure: 12/19/2012
• Moderation: VulDB entry created
• Entries: 1: VDB-63208
• CPE: ready
• CWE: CWE-59 (Confirmed)
• CVSS: 5.1
• EPSS: 0.00104
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-3329
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-3329
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-3329/