Centrify Deployment Manager CVE-2012-6348 Insecure Temporary File Handling Vulnerability
BID:56802
Info
Centrify Deployment Manager CVE-2012-6348 Insecure Temporary File Handling Vulnerability
| Bugtraq ID: | 56802 |
| Class: | Design Error |
| CVE: |
CVE-2012-6348 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 03 2012 12:00AM |
| Updated: | Jan 09 2013 06:40AM |
| Credit: | Larry W. Cashdollar |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Centrify Deployment Manager CVE-2012-6348 Insecure Temporary File Handling Vulnerability
Centrify Deployment Manager is prone to an insecure temporary file-handling vulnerability.
An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application.
Deployment Manager 2.1.0.283 is vulnerable; other versions may also be affected.
Centrify Deployment Manager is prone to an insecure temporary file-handling vulnerability.
An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application.
Deployment Manager 2.1.0.283 is vulnerable; other versions may also be affected.
Exploit / POC
Centrify Deployment Manager CVE-2012-6348 Insecure Temporary File Handling Vulnerability
An attacker can use readily available commands to launch attacks.
The following exploit code is available:
An attacker can use readily available commands to launch attacks.
The following exploit code is available:
Solution / Fix
Centrify Deployment Manager CVE-2012-6348 Insecure Temporary File Handling Vulnerability
Solution:
Updates are available. Please see the reference for more details.
Solution:
Updates are available. Please see the reference for more details.
References
Centrify Deployment Manager CVE-2012-6348 Insecure Temporary File Handling Vulnerability
References:
References: