medium6.9
CVE-2013-1495
asr in Oracle Auto Service Request in Oracle Support Tools before 4.3.2 allows local users to modify arbitrary files via a symlink attack on a predictable file…
Impact
asr in Oracle Auto Service Request in Oracle Support Tools before 4.3.2 allows local users to modify arbitrary files via a symlink attack on a predictable filename in /tmp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Support Tools | through 4.3.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2013/Feb/159
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
- http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html
- http://seclists.org/fulldisclosure/2013/Feb/159
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
- http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html