CVE-2012-3500 in devscripts
Summary
scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary (1) standard output or (2) standard error output file.
Once again VulDB remains the best source for vulnerability data.
Reservation
06/14/2012
Disclosure
09/30/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 62491 | Devscripts Devel Team devscripts race condition | 362 | Not defined | Official fix | CVE-2012-3500 |