CVE-2013-1495
asr in Oracle Auto Service Request in Oracle Support Tools before 4.3.2 allows local users to modify arbitrary files via a symlink attack on a predictable filename in /tmp.
Date published : 2013-03-18
http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html