Vulnerability in Iproute2 Project
CVE-2012-1088
iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by (1) configure or (2) examples/dhcp-client-script.
EPSS: 0.004 (27.8th percentile) — read the EPSS interpretation.
Affected products
- Iproute2_project Iproute2 — versions 3.0.0, 3.1.0
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_HP, vendor-advisory)