NetSight
IP …
low3.3

CVE-2012-6348

Centrify Deployment Manager 2.1.0.283, as distributed in Centrify Suite before 2012.5, allows local users to (1) overwrite arbitrary files via a symlink attack…

Impact

Centrify Deployment Manager 2.1.0.283, as distributed in Centrify Suite before 2012.5, allows local users to (1) overwrite arbitrary files via a symlink attack on the adcheckDMoutput temporary file, or (2) overwrite arbitrary files and consequently gain privileges via a symlink attack on the centrify.cmd.0 temporary file.

Affected products

VendorProductAffected versions
CentrifyCentrify Deployment Manager
Version 2.1.0.283
CentrifyCentrify Suite
through 2012

Weakness classification

CWE-59

References