CVE-2012-6348

Name of the Vulnerable Software and Affected Versions Centrify Deployment Manager version 2.1.0.283 Centrify Suite versions prior to 2012.5

Description The issue allows local users to overwrite arbitrary files via a symlink attack on the adcheckDMoutput temporary file. Additionally, it enables local users to overwrite arbitrary files and consequently gain privileges via a symlink attack on the centrify.cmd.0 temporary file.

Recommendations For Centrify Deployment Manager version 2.1.0.283, consider updating to a version that is part of Centrify Suite 2012.5 or later. For Centrify Suite versions prior to 2012.5, update to Centrify Suite 2012.5 or later to resolve the issue.