CVE-2012-3500

CVE-2012-3500 describes a local privilege escalation vulnerability in scripts/annotate-output.sh within devscripts prior to version 2.12.2, and rpmdevtools before 8.3. An attacker can exploit this by creating a symbolic link to an arbitrary file, allowing them to modify that file through the temporary standard output or error files. This vulnerability has a low severity CVSS score of 1.2, indicating a local attack vector with high attack complexity and a potential impact of partial integrity loss. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.