iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by (1) configure or (2) examples/dhcp-client-script.
Platform | Package | Release Date | Advisory |
---|---|---|---|
Amazon Linux 1 | iproute | 2012-04-05 12:51 | ALAS-2012-64 |
Score Type | Score | Vector | |
---|---|---|---|
Amazon Linux | CVSSv2 | 1.9 | AV:L/AC:M/Au:N/C:N/I:P/A:N |
NVD | CVSSv2 | 3.3 | AV:L/AC:M/Au:N/C:N/I:P/A:P |