PT-2012-4657

CVE-2012-3345

Published

2012-06-15

Updated

2017-07-01

CVSS 2.0

5.6

Medium

MetricsAV:L/AC:H/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions ioquake3 versions prior to r2253

Description The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporary file.

Recommendations For versions prior to r2253, update to version r2253 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾