CVE-2012-3500

EPSS 0.06%

發布日:2012/10/1修改日:2026/4/28

也稱為:DEBIAN-CVE-2012-3500

描述

scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary (1) standard output or (2) standard error output file.

受影響套件(1)

Debian/devscriptsfrom 0, < 2.12.2

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2012-3500