CVE-2012-5530

Name of the Vulnerable Software and Affected Versions Performance Co-Pilot (PCP) versions prior to 3.6.10

Description The issue allows local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file. This is due to a vulnerability in the pcmd and pmlogger init scripts.

Recommendations For versions prior to 3.6.10, update to version 3.6.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the /var/tmp directory to minimize the risk of exploitation.