CVE-2012-3537

CVE-2012-3537 describes a local privilege escalation vulnerability in the Crowbar Ohai plugin within Dell Crowbar, affecting versions possibly 1.4 and earlier. The flaw stems from insecure handling of temporary files and predictable file names, allowing local users to execute arbitrary shell commands. With a CVSS score of 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P), this vulnerability requires local access and low attack complexity to achieve partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating low current threat visibility.