CVE-2012-4417
The MITRE CVE dictionary describes this issue as:
GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
Find out more about CVE-2012-4417 from the MITRE CVE dictionary dictionary and NIST NVD.
CVSS v2 metrics
| Base Score | 2.1 |
|---|---|
| Base Metrics | AV:L/AC:L/Au:N/C:N/I:P/A:N |
| Access Vector | Local |
| Access Complexity | Low |
| Authentication | None |
| Confidentiality Impact | None |
| Integrity Impact | Partial |
| Availability Impact | None |
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
Red Hat Security Errata
| Platform | Errata | Release Date |
|---|---|---|
| Red Hat Storage Native Client for Red Hat Enterprise Linux 6 (glusterfs) | RHSA-2012:1456 | 2012-11-12 |
| Red Hat Storage Native Client for Red Hat Enterprise Linux 5 (glusterfs) | RHSA-2012:1456 | 2012-11-12 |
| Red Hat Storage Server 2.0 (glusterfs) | RHSA-2012:1456 | 2012-11-12 |
Acknowledgements
These issues were discovered by Kurt Seifried of Red Hat, and Jim Meyering.CVE description copyright © 2017, The MITRE Corporation