CVE-2012-5635

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.

Score

CVSS 2.0 2.1 Low

Status

Modified - secalert@redhat.com

Published

2013-04-09

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Glusterfs (Gluster)
• Storage Management Console (Redhat)
• Storage Native Client (Redhat)
• Storage Server (Redhat)

References

• http://rhn.redhat.com/errata/RHSA-2013-0691.html
• https://bugzilla.redhat.com/show_bug.cgi?id=886364