« Volver al listado

CVE-2012-3329

Estado: ModificadaBaja (3.3)—

IBM Advanced Settings Utility (ASU) through 3.62 and 3.70 through 9.21 and Bootable Media Creator (BoMC) through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a (1) temporary file or (2) log file.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

IBM — Advanced Settings UtilityIBM — Bootable Media Creator

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-3329",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.3,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-12-19T11:55:54.127",
  "references": [
    {
      "url": "http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5092090",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78044",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5092090",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78044",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-59"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Advanced Settings Utility (ASU) through 3.62 and 3.70 through 9.21 and Bootable Media Creator (BoMC) through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a (1) temporary file or (2) log file."
    },
    {
      "lang": "es",
      "value": "IBM Advanced Settings Utility (ASU) hasta la  v3.62 y v3.70 hasta la v9.21 y Bootable Media Creator (BOMC) hasta la v2.30 y v3.00 hasta la v9.21 en Linux permiten a los usuarios locales sobreescribir ficheros de su elección mediante un ataque de enlaces simbólicos en un archivo (1) temporal o (2) el archivo de registro.\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:43:01.703",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:advanced_settings_utility:3.62:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EE696B69-3E8A-4E7B-839B-08DFF9461323"
            },
            {
              "criteria": "cpe:2.3:a:ibm:advanced_settings_utility:3.70:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2272FB68-F4B7-45D2-BFDE-B4E271F6E1F7"
            },
            {
              "criteria": "cpe:2.3:a:ibm:advanced_settings_utility:9.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "96A1D22C-A85E-4785-8BEA-9F15F54EBC1A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:bootable_media_creator:2.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB8AE05D-F143-41C9-8D16-0A6A91404954"
            },
            {
              "criteria": "cpe:2.3:a:ibm:bootable_media_creator:3.00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "49538924-3A36-4ECC-9E7D-435F926F8E87"
            },
            {
              "criteria": "cpe:2.3:a:ibm:bootable_media_creator:9.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27D9B049-53DD-42E8-98E0-68588D58FFFE"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "155AD4FB-E527-4103-BCEF-801B653DEA37"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}