Security Advisory

CVE-2012-0420

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-12-02 02:00:00
Last updated 2024-08-06 18:23:31
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

zypp-refresh-wrapper in SUSE Zypper before 1.3.20 and 1.6.x before 1.6.166 allows local users to create files in arbitrary directories, or possibly have unspecified other impact, via a pathname in the ZYPP_LOCKFILE_ROOT environment variable.