CVE-2012-3329

IBM Advanced Settings Utility (ASU) through 3.62 and 3.70 through 9.21 and Bootable Media Creator (BoMC) through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a (1) temporary file or (2) log file.

CVSS v2.0 3.3 LOW

3.3^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:M/Au:N/C:N/I:P/A:P

Exploitability : 3.4 / Impact : 4.9

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5092090	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/78044

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:ibm:advanced_settings_utility:3.62:::::::*
	cpe:2.3:a:ibm:advanced_settings_utility:3.70:::::::*
	cpe:2.3:a:ibm:advanced_settings_utility:9.21:::::::*
	cpe:2.3:a:ibm:bootable_media_creator:2.30:::::::*
	cpe:2.3:a:ibm:bootable_media_creator:3.00:::::::*
	cpe:2.3:a:ibm:bootable_media_creator:9.21:::::::*

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2012-12-19 11:55

Updated : 2023-12-10 11:16

NVD link : CVE-2012-3329

Mitre link : CVE-2012-3329

CVE.ORG link : CVE-2012-3329

JSON object : View

Products Affected

ibm

advanced_settings_utility
bootable_media_creator

linux

linux_kernel

CWE

CWE-59

Improper Link Resolution Before File Access ('Link Following')

{"id": "CVE-2012-3329", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.3, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-12-19T11:55:54.127", "references": [{"url": "http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5092090", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78044", "source": "psirt@us.ibm.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-59"}]}], "descriptions": [{"lang": "en", "value": "IBM Advanced Settings Utility (ASU) through 3.62 and 3.70 through 9.21 and Bootable Media Creator (BoMC) through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a (1) temporary file or (2) log file."}, {"lang": "es", "value": "IBM Advanced Settings Utility (ASU) hasta la v3.62 y v3.70 hasta la v9.21 y Bootable Media Creator (BOMC) hasta la v2.30 y v3.00 hasta la v9.21 en Linux permiten a los usuarios locales sobreescribir ficheros de su elecci\u00f3n mediante un ataque de enlaces simb\u00f3licos en un archivo (1) temporal o (2) el archivo de registro.\r\n"}], "lastModified": "2017-08-29T01:31:53.900", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:advanced_settings_utility:3.62:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE696B69-3E8A-4E7B-839B-08DFF9461323"}, {"criteria": "cpe:2.3:a:ibm:advanced_settings_utility:3.70:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2272FB68-F4B7-45D2-BFDE-B4E271F6E1F7"}, {"criteria": "cpe:2.3:a:ibm:advanced_settings_utility:9.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "96A1D22C-A85E-4785-8BEA-9F15F54EBC1A"}, {"criteria": "cpe:2.3:a:ibm:bootable_media_creator:2.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB8AE05D-F143-41C9-8D16-0A6A91404954"}, {"criteria": "cpe:2.3:a:ibm:bootable_media_creator:3.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49538924-3A36-4ECC-9E7D-435F926F8E87"}, {"criteria": "cpe:2.3:a:ibm:bootable_media_creator:9.21:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27D9B049-53DD-42E8-98E0-68588D58FFFE"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "155AD4FB-E527-4103-BCEF-801B653DEA37"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@us.ibm.com"}