CVE-2012-3440

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2012-3440
A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file.

5.6 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:H/Au:N/C:N/I:C/A:C

Exploitability : 1.9 / Impact : 9.2

Access Vector LOCAL

Access Complexity HIGH

Authentication NONE

Confidentiality Impact NONE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
http://www.securityfocus.com/bid/54868
https://bugzilla.redhat.com/show_bug.cgi?id=844442 Exploit
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:todd_miller:sudo:1.7.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
History

13 Feb 2023, 04:34

Type Values Removed Values Added
Summary CVE-2012-3440 sudo: insecure temporary file use in RPM %postun script A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file.
References
  • {'url': 'https://access.redhat.com/security/cve/CVE-2012-3440', 'name': 'https://access.redhat.com/security/cve/CVE-2012-3440', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2012:1149', 'name': 'https://access.redhat.com/errata/RHSA-2012:1149', 'tags': [], 'refsource': 'MISC'}

02 Feb 2023, 18:15

Type Values Removed Values Added
Summary A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file. CVE-2012-3440 sudo: insecure temporary file use in RPM %postun script
References
  • (MISC) https://access.redhat.com/security/cve/CVE-2012-3440 -
  • (MISC) https://access.redhat.com/errata/RHSA-2012:1149 -
Information

Published : 2012-08-08 10:26

Updated : 2023-12-10 11:16

NVD link : CVE-2012-3440

Mitre link : CVE-2012-3440

CVE.ORG link : CVE-2012-3440

JSON object : View

Products Affected

redhat

  • enterprise_linux

todd_miller

  • sudo
CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')