CVE-2012-5635
Fixed in a distro release EPSS <1%
The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.
Products: glusterfs, redhat storage_management_console, redhat storage_native_client, redhat storage_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | glusterfs | 3.5.0-1 |
| Debian 13 | glusterfs | 3.5.0-1 |
| Debian 14 | glusterfs | 3.5.0-1 |
| Red Hat storage 2.0 console el6 | rhsc | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-backend | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-config | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-dbscripts | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-genericapi | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-jboss-deps | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-notification-service | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-restapi | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-setup | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-tools-common | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-userportal | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | rhsc-webadmin-portal | 0:2.0.techpreview1-4.el6rhs |
| Red Hat storage 2.0 console el6 | vdsm | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 console el6 | vdsm-bootstrap | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | appliance | 0:1.7.1-1.el6rhs |
| Red Hat storage 2.0 server el6 | appliance-base | 0:1.7.1-1.el6rhs |
| Red Hat storage 2.0 server el6 | augeas | 0:0.9.0-1.el6 |
| Red Hat storage 2.0 server el6 | augeas-debuginfo | 0:0.9.0-1.el6 |
| Red Hat storage 2.0 server el6 | augeas-devel | 0:0.9.0-1.el6 |
| Red Hat storage 2.0 server el6 | augeas-libs | 0:0.9.0-1.el6 |
| Red Hat storage 2.0 server el6 | gluster-swift | 0:1.4.8-5.el6rhs |
| Red Hat storage 2.0 server el6 | gluster-swift-account | 0:1.4.8-5.el6rhs |
| Red Hat storage 2.0 server el6 | gluster-swift-container | 0:1.4.8-5.el6rhs |
| Red Hat storage 2.0 server el6 | gluster-swift-doc | 0:1.4.8-5.el6rhs |
| Red Hat storage 2.0 server el6 | gluster-swift-object | 0:1.4.8-5.el6rhs |
| Red Hat storage 2.0 server el6 | gluster-swift-proxy | 0:1.4.8-5.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs | 0:3.3.0.7rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-debuginfo | 0:3.3.0.7rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-devel | 0:3.3.0.7rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-fuse | 0:3.3.0.7rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-geo-replication | 0:3.3.0.7rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-rdma | 0:3.3.0.7rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-server | 0:3.3.0.7rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | libvirt | 0:0.9.10-21.el6_3.8 |
| Red Hat storage 2.0 server el6 | libvirt-client | 0:0.9.10-21.el6_3.8 |
| Red Hat storage 2.0 server el6 | libvirt-debuginfo | 0:0.9.10-21.el6_3.8 |
| Red Hat storage 2.0 server el6 | libvirt-devel | 0:0.9.10-21.el6_3.8 |
| Red Hat storage 2.0 server el6 | libvirt-lock-sanlock | 0:0.9.10-21.el6_3.8 |
| Red Hat storage 2.0 server el6 | libvirt-python | 0:0.9.10-21.el6_3.8 |
| Red Hat storage 2.0 server el6 | rhn-check | 0:1.0.0-73.el6rhs |
| Red Hat storage 2.0 server el6 | rhn-client-tools | 0:1.0.0-73.el6rhs |
| Red Hat storage 2.0 server el6 | rhn-setup | 0:1.0.0-73.el6rhs |
| Red Hat storage 2.0 server el6 | rhn-setup-gnome | 0:1.0.0-73.el6rhs |
| Red Hat storage 2.0 server el6 | sanlock | 0:2.3-4.el6_3 |
| Red Hat storage 2.0 server el6 | sanlock-debuginfo | 0:2.3-4.el6_3 |
| Red Hat storage 2.0 server el6 | sanlock-devel | 0:2.3-4.el6_3 |
| Red Hat storage 2.0 server el6 | sanlock-lib | 0:2.3-4.el6_3 |
| Red Hat storage 2.0 server el6 | sanlock-python | 0:2.3-4.el6_3 |
| Red Hat storage 2.0 server el6 | sos | 0:2.2-17.2.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-bootstrap | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-cli | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-debug-plugin | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-debuginfo | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-gluster | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-hook-faqemu | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-hook-vhostmd | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-python | 0:4.9.6-20.el6rhs |
| Red Hat storage 2.0 server el6 | vdsm-reg | 0:4.9.6-20.el6rhs |
| Red Hat storage 2 client el5 | glusterfs | 0:3.3.0.7rhs-1.el5 |
| Red Hat storage 2 client el5 | glusterfs-debuginfo | 0:3.3.0.7rhs-1.el5 |
| Red Hat storage 2 client el5 | glusterfs-devel | 0:3.3.0.7rhs-1.el5 |
| Red Hat storage 2 client el5 | glusterfs-fuse | 0:3.3.0.7rhs-1.el5 |
| Red Hat storage 2 client el5 | glusterfs-rdma | 0:3.3.0.7rhs-1.el5 |
| Red Hat storage 3 client el6 | glusterfs | 0:3.3.0.7rhs-1.el6 |
| Red Hat storage 3 client el6 | glusterfs-debuginfo | 0:3.3.0.7rhs-1.el6 |
| Red Hat storage 3 client el6 | glusterfs-devel | 0:3.3.0.7rhs-1.el6 |
| Red Hat storage 3 client el6 | glusterfs-fuse | 0:3.3.0.7rhs-1.el6 |
| Red Hat storage 3 client el6 | glusterfs-rdma | 0:3.3.0.7rhs-1.el6 |