CVEvulnerability
CVE-2013-1495
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-03-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-59
Description
asr in Oracle Auto Service Request in Oracle Support Tools before 4.3.2 allows local users to modify arbitrary files via a symlink attack on a predictable filename in /tmp.
Affected configurations
• oracle support tools (<= 4.3.2)
Related
Weakness · CWE (1)
- CWE-59 Improper Link Resolution Before File Access weakness
References
- http://seclists.org/fulldisclosure/2013/Feb/159 seclists.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 www.mandriva.com
- http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html Vendor Advisory
- http://seclists.org/fulldisclosure/2013/Feb/159 seclists.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 www.mandriva.com
- http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html Vendor Advisory