Vulnerability in IBM Advanced Settings Utility
CVE-2012-3329
IBM Advanced Settings Utility (ASU) through 3.62 and 3.70 through 9.21 and Bootable Media Creator (BoMC) through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a (1) temporary file or (2) log file.
EPSS: 0.003 (26.7th percentile) — read the EPSS interpretation.
Affected products
- Ibm Advanced_settings_utility — versions 3.62, 3.70, 9.21
- Ibm Bootable_media_creator — versions 2.30, 3.00, 9.21
- Linux Linux_kernel
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)