CVE-2012-3500

scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on…

published October 1, 2012

CVSS
—
EPSS
0%
Percentile
18.0
In the wild
Unconfirmed
What it is

scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary (1) standard output or (2) standard error output file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00270 · 18.0th percentile
Published
2012-10-01T00:00Z
EPSS history
Timeline
  • 01 OCT 00:00Z
    scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on…
    cvelistv5