Vulnerability Details CVE-2012-3440
A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.9%
CVSS Severity
CVSS v2 Score 5.6
References
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.securityfocus.com/bid/54868
- https://bugzilla.redhat.com/show_bug.cgi?id=844442
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.securityfocus.com/bid/54868
- https://bugzilla.redhat.com/show_bug.cgi?id=844442
Products affected by CVE-2012-3440
-
cpe:2.3:a:todd_miller:sudo:1.7.2
-
cpe:2.3:o:redhat:enterprise_linux:5