CVE-2013-0261 Packstack: packstack: arbitrary file overwrite via symlink attack
HighCVSS 8.8
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name in the /tmp directory. This vulnerability allows the local user to overwrite arbitrary files on the system, potentially leading to system compromise or data corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat openstack | < 0:2012.2.2-1.0.dev408.el6ost | 0:2012.2.2-1.0.dev408.el6ost |
| redhat openstack | All versions | No fix listed |
| OpenStack essex | All versions | No fix listed |
| OpenStack folsom | All versions | No fix listed |
References
- RHSA-2013:0595 vendor-advisory
- RHSA-2013:0595 vendor-advisory
- access.redhat.com vdb-entry
- bugzilla.redhat.com