CVE-2012-2120 latex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when used with the H or T option, allows local users to overwrite arbitrary files via a symlink attack on a tem...
LowCVSS 3.3
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
latex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when used with the H or T option, allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/texlive-extra(Debian:12) | < 2012.20130315-1 | 2012.20130315-1 |
| debian/texlive-extra(Debian:13) | < 2012.20130315-1 | 2012.20130315-1 |
| debian/texlive-extra(Debian:14) | < 2012.20130315-1 | 2012.20130315-1 |
| debian texlive-extra-utils | = 2011.20120322 | No fix listed |
References
- Debian Security Tracker CVE-2012-2120 vendor-advisory
- bugs.debian.org
- [oss-security] 20120419 CVE request: latex2man / texlive mailing-list
- [oss-security] 20120419 Re: CVE request: latex2man / texlive mailing-list
- bugs.debian.org issue-tracking