Every CVE Search/ Get API key

CVE-2012-5638

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log...

3.6 LowFix available

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Exploit likelihood

0.34%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.6

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Record
CVE-2012-5638
CVSS 2.0
3.6 LowAV:L/AC:L/Au:N/C:N/I:P/A:P
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Record
CVE-2012-5638
Updated
2026-11-02
EUVDEUVD-2012-5522 No score

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Record
EUVD-2012-5522
Updated
2026-11-03
GitHub AdvisoriesGHSA-48rw-xq3g-hfw6 No score

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log...

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Record
GHSA-48rw-xq3g-hfw6
Updated
2026-11-02
OSV No score

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Record
CVE-2012-5638
Updated
2026-11-02
OSVDEBIAN-CVE-2012-5638 No score

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Record
DEBIAN-CVE-2012-5638
Updated
2026-11-02
OSVUBUNTU-CVE-2012-5638 No score

The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.

Record
UBUNTU-CVE-2012-5638
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
sanlock
Debian:12
 before 2.2-2
2.2-2
sanlock
Debian:13
 before 2.2-2
2.2-2
sanlock
Debian:14
 before 2.2-2
2.2-2
sanlock
Red Hat:enterprise_linux:6::hypervisor
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-debuginfo
Red Hat:enterprise_linux:6::hypervisor
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-devel
Red Hat:enterprise_linux:6::hypervisor
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-lib
Red Hat:enterprise_linux:6::hypervisor
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-python
Red Hat:enterprise_linux:6::hypervisor
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
glusterfs
Red Hat:storage:2:client:el5
 before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
glusterfs-debuginfo
Red Hat:storage:2:client:el5
 before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
Show 67 moreShow less
Affected packages
PackageAffectedFixed
glusterfs-devel
Red Hat:storage:2:client:el5
 before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
glusterfs-fuse
Red Hat:storage:2:client:el5
 before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
glusterfs-rdma
Red Hat:storage:2:client:el5
 before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
appliance
Red Hat:storage:2.0:server:el6
 before 0:1.7.1-1.el6rhs
0:1.7.1-1.el6rhs
appliance-base
Red Hat:storage:2.0:server:el6
 before 0:1.7.1-1.el6rhs
0:1.7.1-1.el6rhs
augeas
Red Hat:storage:2.0:server:el6
 before 0:0.9.0-1.el6
0:0.9.0-1.el6
augeas-debuginfo
Red Hat:storage:2.0:server:el6
 before 0:0.9.0-1.el6
0:0.9.0-1.el6
augeas-devel
Red Hat:storage:2.0:server:el6
 before 0:0.9.0-1.el6
0:0.9.0-1.el6
augeas-libs
Red Hat:storage:2.0:server:el6
 before 0:0.9.0-1.el6
0:0.9.0-1.el6
gluster-swift
Red Hat:storage:2.0:server:el6
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-account
Red Hat:storage:2.0:server:el6
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-container
Red Hat:storage:2.0:server:el6
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-doc
Red Hat:storage:2.0:server:el6
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-object
Red Hat:storage:2.0:server:el6
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-proxy
Red Hat:storage:2.0:server:el6
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
glusterfs
Red Hat:storage:2.0:server:el6
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-debuginfo
Red Hat:storage:2.0:server:el6
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-devel
Red Hat:storage:2.0:server:el6
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-fuse
Red Hat:storage:2.0:server:el6
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-geo-replication
Red Hat:storage:2.0:server:el6
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-rdma
Red Hat:storage:2.0:server:el6
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-server
Red Hat:storage:2.0:server:el6
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
libvirt
Red Hat:storage:2.0:server:el6
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-client
Red Hat:storage:2.0:server:el6
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-debuginfo
Red Hat:storage:2.0:server:el6
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-devel
Red Hat:storage:2.0:server:el6
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-lock-sanlock
Red Hat:storage:2.0:server:el6
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-python
Red Hat:storage:2.0:server:el6
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
rhn-check
Red Hat:storage:2.0:server:el6
 before 0:1.0.0-73.el6rhs
0:1.0.0-73.el6rhs
rhn-client-tools
Red Hat:storage:2.0:server:el6
 before 0:1.0.0-73.el6rhs
0:1.0.0-73.el6rhs
rhn-setup
Red Hat:storage:2.0:server:el6
 before 0:1.0.0-73.el6rhs
0:1.0.0-73.el6rhs
rhn-setup-gnome
Red Hat:storage:2.0:server:el6
 before 0:1.0.0-73.el6rhs
0:1.0.0-73.el6rhs
sanlock
Red Hat:storage:2.0:server:el6
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-debuginfo
Red Hat:storage:2.0:server:el6
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-devel
Red Hat:storage:2.0:server:el6
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-lib
Red Hat:storage:2.0:server:el6
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-python
Red Hat:storage:2.0:server:el6
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sos
Red Hat:storage:2.0:server:el6
 before 0:2.2-17.2.el6rhs
0:2.2-17.2.el6rhs
vdsm
Red Hat:storage:2.0:server:el6
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-bootstrap
Red Hat:storage:2.0:server:el6
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-cli
Red Hat:storage:2.0:server:el6
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-debug-plugin
Red Hat:storage:2.0:server:el6
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-debuginfo
Red Hat:storage:2.0:server:el6
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-gluster
Red Hat:storage:2.0:server:el6
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-hook-faqemu
Red Hat:storage:2.0:server:el6
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-hook-vhostmd
Red Hat:storage:2.0:server:el6
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-python
Red Hat:storage:2.0:server:el6
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-reg
Red Hat:storage:2.0:server:el6
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
rhsc
Red Hat:storage:2.0:console:el6
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-backend
Red Hat:storage:2.0:console:el6
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-config
Red Hat:storage:2.0:console:el6
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-dbscripts
Red Hat:storage:2.0:console:el6
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-genericapi
Red Hat:storage:2.0:console:el6
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-jboss-deps
Red Hat:storage:2.0:console:el6
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-notification-service
Red Hat:storage:2.0:console:el6
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-restapi
Red Hat:storage:2.0:console:el6
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-setup
Red Hat:storage:2.0:console:el6
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-tools-common
Red Hat:storage:2.0:console:el6
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-userportal
Red Hat:storage:2.0:console:el6
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-webadmin-portal
Red Hat:storage:2.0:console:el6
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
vdsm
Red Hat:storage:2.0:console:el6
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-bootstrap
Red Hat:storage:2.0:console:el6
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
glusterfs
Red Hat:storage:3:client:el6
 before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6
glusterfs-debuginfo
Red Hat:storage:3:client:el6
 before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6
glusterfs-devel
Red Hat:storage:3:client:el6
 before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6
glusterfs-fuse
Red Hat:storage:3:client:el6
 before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6
glusterfs-rdma
Red Hat:storage:3:client:el6
 before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6

History

History
RecordedChangedSources
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-5638 is a low vulnerability (CVSS 3.6) in Ovirt Sanlock, published December 20, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 26th percentile. Fixed in sanlock 2.2-2.

References

Show 36 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open