CVE-2013-0164
Fixed in a distro release EPSS <1%
The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.
Products: redhat openshift, redhat openshift_origin
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openshift 1 | jenkins | 0:1.498-1.1.el6op |
| Red Hat openshift 1 | libmongodb | 0:2.0.2-6.el6op |
| Red Hat openshift 1 | mongodb | 0:2.0.2-6.el6op |
| Red Hat openshift 1 | mongodb-debuginfo | 0:2.0.2-6.el6op |
| Red Hat openshift 1 | mongodb-devel | 0:2.0.2-6.el6op |
| Red Hat openshift 1 | mongodb-server | 0:2.0.2-6.el6op |
| Red Hat openshift 1 | openshift-console | 0:0.0.13-2.el6op |
| Red Hat openshift 1 | openshift-origin-broker | 0:1.0.10-1.el6op |
| Red Hat openshift 1 | openshift-origin-broker-util | 0:1.0.14-1.el6op |
| Red Hat openshift 1 | openshift-origin-cartridge-haproxy-1.4 | 0:1.0.3-1.el6op |
| Red Hat openshift 1 | openshift-origin-cartridge-ruby-1.8 | 0:1.0.5-1.el6op |
| Red Hat openshift 1 | openshift-origin-cartridge-ruby-1.9-scl | 0:1.0.5-1.el6op |
| Red Hat openshift 1 | openshift-origin-msg-node-mcollective | 0:1.0.2-1.el6op |
| Red Hat openshift 1 | openshift-origin-node-util | 0:1.0.7-1.el6op |
| Red Hat openshift 1 | openshift-origin-port-proxy | 0:1.0.3-1.el6op |
| Red Hat openshift 1 | rhc | 0:1.3.2-1.3.el6op |
| Red Hat openshift 1 | ruby193-mod_passenger | 0:3.0.12-21.el6op |
| Red Hat openshift 1 | ruby193-rubygem-activerecord | 1:3.2.8-2.el6 |
| Red Hat openshift 1 | ruby193-rubygem-activerecord-doc | 1:3.2.8-2.el6 |
| Red Hat openshift 1 | ruby193-rubygem-passenger | 0:3.0.12-21.el6op |
| Red Hat openshift 1 | ruby193-rubygem-passenger-debuginfo | 0:3.0.12-21.el6op |
| Red Hat openshift 1 | ruby193-rubygem-passenger-devel | 0:3.0.12-21.el6op |
| Red Hat openshift 1 | ruby193-rubygem-passenger-doc | 0:3.0.12-21.el6op |
| Red Hat openshift 1 | ruby193-rubygem-passenger-native | 0:3.0.12-21.el6op |
| Red Hat openshift 1 | ruby193-rubygem-passenger-native-libs | 0:3.0.12-21.el6op |
| Red Hat openshift 1 | rubygem-activerecord | 1:3.0.13-3.el6op |
| Red Hat openshift 1 | rubygem-openshift-origin-auth-remote-user | 0:1.0.4-2.el6op |
| Red Hat openshift 1 | rubygem-openshift-origin-common | 0:1.0.2-1.el6op |
| Red Hat openshift 1 | rubygem-openshift-origin-console | 0:1.0.6-1.el6op |
| Red Hat openshift 1 | rubygem-openshift-origin-console-doc | 0:1.0.6-1.el6op |
| Red Hat openshift 1 | rubygem-openshift-origin-controller | 0:1.0.11-1.el6op |
| Red Hat openshift 1 | rubygem-openshift-origin-dns-bind | 0:1.0.2-1.el6op |
| Red Hat openshift 1 | rubygem-openshift-origin-msg-broker-mcollective | 0:1.0.4-1.el6op |
| Red Hat openshift 1 | rubygem-openshift-origin-node | 0:1.0.10-6.el6op |