Vulnerability in Gluster Glusterfs
CVE-2012-5635
The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.
EPSS: 0.003 (24.1th percentile) — read the EPSS interpretation.
Affected products
- Gluster Glusterfs
- Redhat Storage_management_console — versions 2.0
- Redhat Storage_native_client
- Redhat Storage_server — versions 2.0
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)