CVE-2013-4157
Fixed in a distro release EPSS <1%
Red Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the (1) e, (2) local-bricks.list, (3) bricks.err, or (4) limits.conf files in /tmp.
Products: redhat storage_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat storage 2.0 server el6 | appliance | 0:2.0.6.0-2.el6rhs |
| Red Hat storage 2.0 server el6 | appliance-base | 0:2.0.6.0-2.el6rhs |
| Red Hat storage 2.0 server el6 | gluster-swift-plugin | 0:1.0-7 |
| Red Hat storage 2.0 server el6 | glusterfs | 0:3.3.0.14rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-debuginfo | 0:3.3.0.14rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-devel | 0:3.3.0.14rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-fuse | 0:3.3.0.14rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-geo-replication | 0:3.3.0.14rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-rdma | 0:3.3.0.14rhs-1.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-server | 0:3.3.0.14rhs-1.el6rhs |