CVE-2012-1088: Low severity Iproute2 Project Iproute2 vulnerability
iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by (1) configure or (2) examples/dhcp-client-script.
Other sources
Multiple (by checking for ATM technology support, checking for Xtables extension support, checking for setns() system call support, and in dhcp-client-script example script) insecure temporary file use cases were found in iproute. A local attacker could use this flaw to conduct symbolic link attacks (modify or remove files via specially-crafted link names).
Upstream patches: [1] http://git.kernel.org/?p=linux/kernel/git/shemminger/iproute2.git;a=commitdiff;h=e557d1ac3a156ba7521ba44b0b412af4542f83f8 [2] http://git.kernel.org/?p=linux/kernel/git/shemminger/iproute2.git;a=commitdiff;h=20ed7b24df05eadf83168d1d0ce0052a31380928
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1088?
The severity of CVE-2012-1088 is low, rated at 3.3.
How do I fix CVE-2012-1088?
To fix CVE-2012-1088, update iproute2 to version 3.3.0 or later.
What type of attack does CVE-2012-1088 involve?
CVE-2012-1088 involves a symlink attack that allows local users to overwrite arbitrary files.
Who is affected by CVE-2012-1088?
Local users on systems running affected versions of iproute2 are at risk from CVE-2012-1088.
Can CVE-2012-1088 lead to data loss?
Yes, CVE-2012-1088 can potentially lead to data loss by allowing unauthorized file overwrites.