CVE:CVE-2012-3329
CNNVD:CNNVD-201212-239
IBM Advanced Settings Utility (ASU)是IBM用于修改BIOS/BMC/RSA/UEFI/IMM微码参数的工具。IBM Bootable Media Creator (BoMC)是用来创建IBM服务器微码升级盘的工具。
基于Linux系统上的IBM Advanced Settings Utility (ASU)3.62之前版本和3.70至9.21版本和Bootable Media Creator (BoMC) 2.30之前版本和3.00至9.21版本中存在漏洞。通过对临时文件或日志文件进行符号链接攻击，本地攻击者可利用该漏洞重写任意文件。
solution:Upgrade ibm advanced_settings_utility to a higher version than 3.62,3.70,9.21,and avoid the version 3.62,3.70,9.21; Upgrade ibm bootable_media_creator to a higher version than 2.30,3.00,9.21,and avoid the version 2.30,3.00,9.21