CVEvulnerability
CVE-2012-5635
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2013-04-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.
Affected configurations
• gluster glusterfs
• redhat storage management console 2.0
• redhat storage native client
• redhat storage server 2.0
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2013-0691.html Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=886364 Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0691.html Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=886364 Vendor Advisory