CVE-2012-5530
The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow...
The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file.
Exploit likelihood
What each source reports
NVD Score used
2.1
The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file.
- Record
CVE-2012-5530- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file.
- Record
CVE-2012-5530- Updated
- 2026-11-02
EUVDEUVD-2012-5422 No score
The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file.
- Record
EUVD-2012-5422- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5rxm-r7q9-4x4v No score
The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow...
The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file.
- Record
GHSA-5rxm-r7q9-4x4v- Updated
- 2026-11-02
OSV No score
The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file.
- Record
CVE-2012-5530- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-5530 No score
The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file.
- Record
DEBIAN-CVE-2012-5530- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10165-1 No score
libpcp-devel-3.10.4-1.23 on GA media
These are all security issues fixed in the libpcp-devel-3.10.4-1.23 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10165-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-5530 is a low vulnerability (CVSS 2.1) in Sgi Performance Co-pilot, published November 29, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. Fixed in pcp 3.7.1.