CVE-2012-6348

Centrify Deployment Manager 2.1.0.283, as distributed in Centrify Suite before 2012.5, allows local users to (1) overwrite arbitrary files via a symlink attack on the adcheckDMoutput temporary file, or (2) overwrite arbitrary files and consequently gain privileges via a symlink attack on the centrify.cmd.0 temporary file.

CVSS v2.0

3.3 LOWAV:L/AC:M/Au:N/C:N/I:P/A:P

EPSS

0.31% chance of exploitation in the next 30 days, 24th percentile

Published

2013-01-04

Updated

2024-09-16

Proof-of-concept exploits (1)

• http://archives.neohapsis.com/archives/bugtraq/2012-12/0113.html

References

• CVE Record
• NVD entry

Related

• CVE-2012-6347
• CVE-2012-6422
• CVE-2012-6342
• CVE-2012-6429
• CVE-2012-6330
• CVE-2012-6430