CVEvulnerability
CVE-2012-3329
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-12-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:L/AC:M/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-59
Description
IBM Advanced Settings Utility (ASU) through 3.62 and 3.70 through 9.21 and Bootable Media Creator (BoMC) through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a (1) temporary file or (2) log file.
Affected configurations
• ibm advanced settings utility 3.62
• ibm advanced settings utility 3.70
• ibm advanced settings utility 9.21
• ibm bootable media creator 2.30
• ibm bootable media creator 3.00
• ibm bootable media creator 9.21
Related
Weakness · CWE (1)
- CWE-59 Improper Link Resolution Before File Access weakness
References
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5092090 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78044 exchange.xforce.ibmcloud.com
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5092090 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78044 exchange.xforce.ibmcloud.com