CVE-2012-2120 | BDVDB-2026-50244 Detail

Description#

latex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when used with the H or T option, allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.openwall.com/lists/oss-security/2012/04/19/12
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668779
http://www.openwall.com/lists/oss-security/2012/04/19/15

Exploit#

No public exploit known

History#

Version 12012-05-18Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.