CVE-2012-4417 GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
LowCVSS 3.6
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/glusterfs(Debian:12) | < 3.2.7-5 | 3.2.7-5 |
| debian/glusterfs(Debian:13) | < 3.2.7-5 | 3.2.7-5 |
| debian/glusterfs(Debian:14) | < 3.2.7-5 | 3.2.7-5 |
| glusterfs | = 3.3.0 | No fix listed |
References
- Debian Security Tracker CVE-2012-4417 vendor-advisory
- RHSA-2012:1456 vendor-advisory
- 56522 vdb-entry
- 1027756 vdb-entry
- bugzilla.redhat.com
- redhat-storage-glusterfs-symlink(80074) vdb-entry
- bugs.debian.org issue-tracking