Release Date: | 2012-08-08 |
A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file.
See more information about CVE-2012-3440 from MITRE CVE dictionary and NIST NVD
NOTE: The following CVSS v2.0 metrics and score provided are preliminary and subject to review.
Base Score: | 5.6 | Base Metrics: | AV:L/AC:H/Au:N/C:N/I:C/A:C |
Access Vector: | Local network | Attack Complexity: | High |
Authentication: | None required | Confidentiality Impact: | None |
Integrity Impact: | Complete | Availability Impact: | Complete |
Platform | Errata | Release Date |
Oracle Linux version 5 (sudo) | ELSA-2012-1149 | 2012-08-07 |
Oracle VM version 3.2 (sudo) | OVMSA-2016-0079 | 2016-06-20 |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team