IBM Advanced Settings Utility (ASU) up to and including 3.62 and 3.70 up to and including 9.21 and Bootable Media Creator (BoMC) up to and including 2.30 and 3.00 up to and including 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a (1) temporary file or (2) log file.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ibm bootable_media_creator 2.30 |
||
ibm bootable_media_creator 3.00 |
||
ibm bootable_media_creator 9.21 |
||
ibm advanced_settings_utility 3.70 |
||
ibm advanced_settings_utility 9.21 |
||
ibm advanced_settings_utility 3.62 |
Vulmon