CVE-2012-5635

Published: Apr 9, 2013Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.

Affected (4)

Products: Gluster: Glusterfs · Redhat: Storage Management Console, Storage Native Client, Storage Server

1 product

3 products

Storage Management Console

Storage Native Client

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Gluster Glusterfs	All versions
Redhat Storage Management Console	Version 2.0
Redhat Storage Native Client	All versions
Redhat Storage Server	Version 2.0

Related CWEs

References (4)

http://rhn.redhat.com/errata/RHSA-2013-0691.html

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=886364

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2013-0691.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=886364

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.