body { transform: translateY(0) !important; }

Your submission was sent successfully! Close

You have successfully unsubscribed! Close

CVE-2012-3440

Published: 8 August 2012

A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users to overwrite arbitrary files via a symlink attack on the /var/tmp/nsswitch.conf.bak temporary file.

Notes

Author	Note
tyhicks	This is a script specific to Red Hat's sudo package

Priority

Status

Package	Release	Status
sudo Launchpad, Ubuntu, Debian	hardy	Not vulnerable
	lucid	Not vulnerable
	natty	Not vulnerable
	oneiric	Not vulnerable
	precise	Not vulnerable
	upstream	Not vulnerable

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›

Further reading