Unscored CVE-2013-1495 EUVD-2013-1531GHSA-hfp4-cq95-qv3q

asr in Oracle Auto Service Request in Oracle Support Tools before 4.3.2 allows local users to modify arbitrary files via a symlink attack o…

Published Mar 18, 2013 · Updated Aug 6, 2024 · Assigned by oracle

Description

asr in Oracle Auto Service Request in Oracle Support Tools before 4.3.2 allows local users to modify arbitrary files via a symlink attack on a predictable filename in /tmp.

References

20130301 Oracle Auto Service Request /tmp file clobbering vulnerability mailing-list
http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html
MDVSA-2013:150 vendor-advisory