Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-5635

Опубликовано: 09 апр. 2013
Источник: nvd
CVSS2: 2.1
EPSS Низкий

Описание

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gluster:glusterfs:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:storage_management_console:2.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:storage_native_client:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:storage_server:2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 19%
0.0006
Низкий

2.1 Low

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu
почти 13 лет назад

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.

redhat
почти 13 лет назад

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.

debian
почти 13 лет назад

The GlusterFS functionality in Red Hat Storage Management Console 2.0, ...

github
больше 3 лет назад

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.

EPSS

Процентиль: 19%
0.0006
Низкий

2.1 Low

CVSS2

Дефекты

CWE-264