The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pcp | Jul 30, 2024 | Nov 29, 2012 |
| Suse | — | Upgrade pcp-pmda-postfixUpgrade pcp-pmda-glusterUpgrade pcp-system-toolsUpgrade pcp-pmda-cifsUpgrade pcp-pmda-smartUpgrade pcp-webapiUpgrade pcp-pmda-amdgpuUpgrade pcp-pmda-sambaUpgrade libpcp_import1Upgrade pcp-export-pcp2sparkUpgrade pcp-pmda-elasticsearchUpgrade libpcp_mmv1Upgrade pcp-pmda-rabbitmqUpgrade pcp-pmda-bondingUpgrade pcp-pmda-summaryUpgrade pcp-pmda-rpmUpgrade pcp-pmda-lmsensorsUpgrade pcp-pmda-zswapUpgrade perl-PCP-PMDAUpgrade pcp-pmda-gfs2Upgrade pcp-pmda-traceUpgrade pcp-pmda-shpingUpgrade pcp-pmda-uwsgiUpgrade pcp-pmda-redisUpgrade libpcp_gui2Upgrade pcp-pmda-roomtempUpgrade pcp-pmda-haclusterUpgrade pcp-pmda-newsUpgrade pcp-pmda-dockerUpgrade pcp-export-pcp2zabbixUpgrade python-pcpUpgrade pcp-pmda-slurmUpgrade pcp-pmda-bashUpgrade pcp-pmda-openmetricsUpgrade pcp-import-mrtg2pcpUpgrade pcp-export-pcp2elasticsearchUpgrade pcp-develUpgrade pcp-pmda-sendmailUpgrade pcp-import-sar2pcpUpgrade pcp-pmda-gpsdUpgrade pcp-pmda-namedUpgrade pcp-export-pcp2xmlUpgrade pcp-pmda-lustrecommUpgrade pcp-pmda-zimbraUpgrade pcp-pmda-bind2Upgrade pcp-pmda-openvswitchUpgrade pcp-pmda-ds389Upgrade pcp-pmda-oracleUpgrade libpcp_web1Upgrade pcp-pmda-vmwareUpgrade pcp-pmda-gpfsUpgrade pcpUpgrade pcp-import-iostat2pcpUpgrade pcp-export-pcp2graphiteUpgrade perl-PCP-LogImportUpgrade pcp-pmda-libvirtUpgrade pcp-pmda-lustreUpgrade pcp-pmda-socketsUpgrade pcp-docUpgrade perl-PCP-MMVUpgrade pcp-export-pcp2jsonUpgrade pcp-guiUpgrade pcp-pmda-nvidia-gpuUpgrade libpcp-develUpgrade pcp-pmda-lioUpgrade pcp-pmda-unboundUpgrade pcp-pmda-netfilterUpgrade pcp-import-collectl2pcpUpgrade pcp-pmda-nginxUpgrade pcp-pmda-ds389logUpgrade pcp-pmda-resctrlUpgrade pcp-pmda-memcacheUpgrade pcp-pmda-mailqUpgrade pcp-confUpgrade pcp-pmda-mountsUpgrade pcp-export-zabbix-agentUpgrade pcp-pmda-weblogUpgrade pcp-managerUpgrade libpcp_trace2Upgrade pcp-pmda-activemqUpgrade pcp-pmda-mysqlUpgrade pcp-pmda-snmpUpgrade pcp-pmda-ciscoUpgrade pcp-pmda-jsonUpgrade pcp-export-pcp2influxdbUpgrade pcp-pmda-systemdUpgrade perl-PCP-LogSummaryUpgrade pcp-pmda-loggerUpgrade pcp-pmda-nutcrackerUpgrade pcp-pmda-dmUpgrade python3-pcpUpgrade pcp-import-ganglia2pcpUpgrade pcp-pmda-kvmUpgrade pcp-pmda-rsyslogUpgrade pcp-pmda-perfeventUpgrade pcp-zeroconfUpgrade pcp-selinuxUpgrade pcp-pmda-apacheUpgrade pcp-pmda-pdnsUpgrade pcp-pmda-dbpingUpgrade pcp-pmda-infinibandUpgrade pcp-pmda-haproxyUpgrade libpcp3Upgrade pcp-pmda-micUpgrade pcp-pmda-nfsclientUpgrade pcp-pmda-netcheckUpgrade pcp-import-sheet2pcp | Feb 17, 2015 | Jul 9, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub