PT-2012-2124

CVE-2011-5146

Published

2012-08-31

Updated

2012-09-05

CVSS 2.0

2.6

Low

MetricsAV:L/AC:H/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Bokken versions prior to 1.6 Bokken versions 1.5-x prior to 1.5-3

Description The issue allows local users to overwrite arbitrary files via a symlink attack on /tmp/graph.dot.

Recommendations For versions prior to 1.6, update to version 1.6 or later. For versions 1.5-x prior to 1.5-3, update to version 1.5-3 or later.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾