Every CVE Search/ Get API key

CVE-2012-5635

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server...

2.1 LowFix available

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.

Exploit likelihood

0.32%Down 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.

Record
CVE-2012-5635
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.

Record
CVE-2012-5635
Updated
2026-11-02
EUVDEUVD-2012-5519 No score

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.

Record
EUVD-2012-5519
Updated
2026-11-03
GitHub AdvisoriesGHSA-w74w-4wpp-3vmm No score

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server...

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.

Record
GHSA-w74w-4wpp-3vmm
Updated
2026-11-02
OSV No score

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.

Record
CVE-2012-5635
Updated
2026-11-02
OSVDEBIAN-CVE-2012-5635 No score

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.

Record
DEBIAN-CVE-2012-5635
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glusterfs
Debian:12
 before 3.5.0-1
3.5.0-1
glusterfs
Debian:13
 before 3.5.0-1
3.5.0-1
glusterfs
Debian:14
 before 3.5.0-1
3.5.0-1
glusterfs
Red Hat:storage:2:client:el5
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
glusterfs-debuginfo
Red Hat:storage:2:client:el5
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
glusterfs-devel
Red Hat:storage:2:client:el5
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
glusterfs-fuse
Red Hat:storage:2:client:el5
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
glusterfs-rdma
Red Hat:storage:2:client:el5
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el5
0:3.3.0.7rhs-1.el5
appliance
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.7.1-1.el6rhs
0:1.7.1-1.el6rhs
appliance-base
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.7.1-1.el6rhs
0:1.7.1-1.el6rhs
Show 62 moreShow less
Affected packages
PackageAffectedFixed
augeas
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.0-1.el6
0:0.9.0-1.el6
augeas-debuginfo
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.0-1.el6
0:0.9.0-1.el6
augeas-devel
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.0-1.el6
0:0.9.0-1.el6
augeas-libs
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.0-1.el6
0:0.9.0-1.el6
gluster-swift
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-account
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-container
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-doc
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-object
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
gluster-swift-proxy
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.4.8-5.el6rhs
0:1.4.8-5.el6rhs
glusterfs
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-debuginfo
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-devel
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-fuse
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-geo-replication
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-rdma
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
glusterfs-server
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6rhs
0:3.3.0.7rhs-1.el6rhs
libvirt
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-client
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-debuginfo
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-devel
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-lock-sanlock
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
libvirt-python
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:0.9.10-21.el6_3.8
0:0.9.10-21.el6_3.8
rhn-check
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.0.0-73.el6rhs
0:1.0.0-73.el6rhs
rhn-client-tools
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.0.0-73.el6rhs
0:1.0.0-73.el6rhs
rhn-setup
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.0.0-73.el6rhs
0:1.0.0-73.el6rhs
rhn-setup-gnome
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:1.0.0-73.el6rhs
0:1.0.0-73.el6rhs
sanlock
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-debuginfo
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-devel
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-lib
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sanlock-python
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:2.3-4.el6_3
0:2.3-4.el6_3
sos
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:2.2-17.2.el6rhs
0:2.2-17.2.el6rhs
vdsm
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-bootstrap
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-cli
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-debug-plugin
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-debuginfo
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-gluster
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-hook-faqemu
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-hook-vhostmd
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-python
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-reg
Red Hat:storage:2.0:server:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
rhsc
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-backend
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-config
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-dbscripts
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-genericapi
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-jboss-deps
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-notification-service
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-restapi
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-setup
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-tools-common
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-userportal
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
rhsc-webadmin-portal
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:2.0.techpreview1-4.el6rhs
0:2.0.techpreview1-4.el6rhs
vdsm
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
vdsm-bootstrap
Red Hat:storage:2.0:console:el6
From an advisory covering 3 CVEs
 before 0:4.9.6-20.el6rhs
0:4.9.6-20.el6rhs
glusterfs
Red Hat:storage:3:client:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6
glusterfs-debuginfo
Red Hat:storage:3:client:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6
glusterfs-devel
Red Hat:storage:3:client:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6
glusterfs-fuse
Red Hat:storage:3:client:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6
glusterfs-rdma
Red Hat:storage:3:client:el6
From an advisory covering 3 CVEs
 before 0:3.3.0.7rhs-1.el6
0:3.3.0.7rhs-1.el6

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-5635 is a low vulnerability (CVSS 2.1) in Gluster Glusterfs, published April 9, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. Fixed in glusterfs 3.5.0-1.

References

Show 22 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open