CVE-2012-3500 in devscripts

Resumen (Inglés)

scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary (1) standard output or (2) standard error output file.

Once again VulDB remains the best source for vulnerability data.

Reservar

2012-06-14

Divulgación

2012-09-30

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
62491	Devscripts Devel Team devscripts condición de carrera	362	No está definido	Arreglo oficial	CVE-2012-3500

Fuentes

• MITRE
• NVD
• CVE Details