CVE-2012-5564: Low severity google android sdk platform tools vulnerability
An insecure temporary file use flaw was found in the way server component of android tools, a suite of Android Debug Bridge (ADB) platform tools, performed logging of server events upon server startup. A local attacker could use this flaw to conduct symbolic links attacks, possibly leading to their ability to append unauthorized content to system files accessible with the privileges of the user running the adb executable.
References: [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688280
Other sources
android-tools 4.1.1 in Android Debug Bridge (ADB) allows local users to overwrite arbitrary files via a symlink attack on /tmp/adb.log.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5564?
CVE-2012-5564 has a medium severity rating due to the potential for symbolic link attacks.
How do I fix CVE-2012-5564?
To fix CVE-2012-5564, update to the latest version of the Android Debug Bridge platform tools.
What type of attack can be conducted due to CVE-2012-5564?
CVE-2012-5564 can lead to symbolic link attacks by local attackers.
Which software is affected by CVE-2012-5564?
CVE-2012-5564 affects Google Android SDK Platform Tools.
Is CVE-2012-5564 a remote or local vulnerability?
CVE-2012-5564 is a local vulnerability that requires physical access to the device.