Red Hat Security AdvisoryRHSA-2012:1456
Red Hat Storage 2.0 security, bug fix, and enhancement update #3
Released 2012-11-12 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Storage Native Client for Red Hat Enterprise Linux 5 glusterfs-3.3.0.5rhs-37.el5, glusterfs-devel-3.3.0.5rhs-37.el5, glusterfs-fuse-3.3.0.5rhs-37.el5 +1
- Red Hat Storage Native Client for Red Hat Enterprise Linux 6 glusterfs-3.3.0.5rhs-37.el6, glusterfs-devel-3.3.0.5rhs-37.el6, glusterfs-fuse-3.3.0.5rhs-37.el6 +1
- Red Hat Storage Server 2.0 glusterfs-3.3.0.5rhs-37.el6rhs, glusterfs-devel-3.3.0.5rhs-37.el6rhs, glusterfs-fuse-3.3.0.5rhs-37.el6rhs +4
Fixes 1 record
Priority LOW 17
GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
CVSS 2.0LOW 3.6· Local · No auth · Interaction — · EPSS 0.00336 · Published 2012-11-18 · Fixed CWE-264
