CVE-2012-5530

Name	CVE-2012-5530
Description	The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
NVD severity	low (attack range: local)
Debian Bugs	698735

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
pcp (PTS)	jessie	3.9.10	fixed
	sid	3.12.1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
pcp	source	(unstable)	3.7.1	low		698735
pcp	source	squeeze	3.3.3-squeeze3	low

first package in unstable is 3.7.1 (package has no debian revision)