Vulnerability in Gluster Glusterfs
CVE-2012-5635
The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extra…
EPSS: 0.001 (19.0th percentile) — read the EPSS interpretation.
Affected products
- Gluster Glusterfs
- Redhat Storage_management_console — versions 2.0
- Redhat Storage_native_client
- Redhat Storage_server — versions 2.0
- N/a — versions n/a
Weakness classification (CWE)
References
- RHSA-2013:0691 (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)