TI-2013-00195 Aliases CVE-2013-0261 GHSA-846g-25mr-v9p5

Packstack: packstack: arbitrary file overwrite via symlink attack

LOW 38CWE-59Published 2013-03-08 · Updated 2026-10-30

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: Partial Red Hat: 1 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-264.

Summary

A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name in the `/tmp` directory. This vulnerability allows the local user to overwrite arbitrary files on the system, potentially leading to system compromise or data corruption.

Why it matters now

EPSS 0.00343 28th percentileScored 2026-11-07

Fix Partial Red Hat: 1 advisoryRed Hat: 1 fixed, 2 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Red Hat	OpenStack Folsom for RHEL 6	—	2012.2.2-1.0.dev408.el6ost	Patch available	CNA
Red Hat	Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)	—	—	No fix listed	CNA
Red Hat	Red Hat OpenStack Platform 4	—	—	No fix listed	CNA

OpenStack Folsom for RHEL 6 VendorRed Hat Affected — Fixed in 2012.2.2-1.0.dev408.el6ost Patch available CNA
Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) VendorRed Hat Affected — Fixed in — No fix listed CNA
Red Hat OpenStack Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:openstack:essex:-:::::::*	not specified by NVD	Vulnerable	OpenStack
cpe:2.3:a:openstack:folsom:-:::::::*	not specified by NVD	Vulnerable	OpenStack

cpe:2.3:a:openstack:essex:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·OpenStack
cpe:2.3:a:openstack:folsom:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·OpenStack

Remediation

Red Hat 1 advisory

RHSA-2013:0595 Released 2013-03-05 · Red Hat rating Moderate
openstack-packstack security and bug fix update
- OpenStack Folsom openstack-packstack-2012.2.2-1.0.dev408.el6ost

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Advisory · 2013-03-08
Red Hat OpenStack Folsom for RHEL 6, Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse), Red Hat OpenStack Platform 4 — RHSA-2013:0595
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2013-00200 Incorrect default permissions in Red Hat OpenStack Folsom for RHEL 6Priority LOW 24
Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)	Affected	No fix yet
Red Hat OpenStack Platform 4	Affected	No fix yet
OpenStack Folsom	Fixed	RHSA-2013:0595

Timeline

2026-10-02 Threatist record created from CVE-2013-0261
2026-10-03 Alias added: GHSA-846g-25mr-v9p5
2026-10-30 Fix available: openstack-packstack@0:2012.2.2-1.0.dev408.el6ost · CNA
2026-10-30 1 new reference · CNA
2026-10-30 Fix available: OpenStack Folsom · Red Hat

References

Advisory 2

Other 2

TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8

See all 7413 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences