CVE-2012-2120 - CERT CVE
ID CVE-2012-2120
Sažetak latex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when used with the H or T option, allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
Reference
CVSS
Base: 3.3
Impact: 4.9
Exploitability:3.4
Pristup
VektorSloženostAutentikacija
LOCAL MEDIUM NONE
Impact
PovjerljivostCjelovitostDostupnost
NONE PARTIAL PARTIAL
CVSS vektor AV:L/AC:M/Au:N/C:N/I:P/A:P
Zadnje važnije ažuriranje 21-05-2012 - 16:24
Objavljeno 18-05-2012 - 22:55