CVE-2012-4417

GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary...

3.6 LowFix available

GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

Exploit likelihood

0.34%Down 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 3.6

GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

Record: CVE-2012-4417
CVSS 2.0: 3.6 LowAV:L/AC:L/Au:N/C:N/I:P/A:P
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

Record: CVE-2012-4417
Updated: 2026-11-02

EUVDEUVD-2012-4353 No score

GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

Record: EUVD-2012-4353
Updated: 2026-11-03

GitHub AdvisoriesGHSA-f7v9-7368-5x59 No score

GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary...

GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

Record: GHSA-f7v9-7368-5x59
Updated: 2026-11-02

OSV No score

GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

Record: CVE-2012-4417
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-4417 No score

GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

Record: DEBIAN-CVE-2012-4417
Updated: 2026-11-02

Affected products

gluster glusterfs

Affected packages

Affected packages
Package	Affected	Fixed
`glusterfs` Debian:12	before 3.2.7-5	3.2.7-5
`glusterfs` Debian:13	before 3.2.7-5	3.2.7-5
`glusterfs` Debian:14	before 3.2.7-5	3.2.7-5
`glusterfs` Red Hat:storage:2:client:el5	before 0:3.3.0.5rhs-37.el5	0:3.3.0.5rhs-37.el5
`glusterfs-debuginfo` Red Hat:storage:2:client:el5	before 0:3.3.0.5rhs-37.el5	0:3.3.0.5rhs-37.el5
`glusterfs-devel` Red Hat:storage:2:client:el5	before 0:3.3.0.5rhs-37.el5	0:3.3.0.5rhs-37.el5
`glusterfs-fuse` Red Hat:storage:2:client:el5	before 0:3.3.0.5rhs-37.el5	0:3.3.0.5rhs-37.el5
`glusterfs-rdma` Red Hat:storage:2:client:el5	before 0:3.3.0.5rhs-37.el5	0:3.3.0.5rhs-37.el5
`glusterfs` Red Hat:storage:2.0:server:el6	before 0:3.3.0.5rhs-37.el6rhs	0:3.3.0.5rhs-37.el6rhs
`glusterfs-debuginfo` Red Hat:storage:2.0:server:el6	before 0:3.3.0.5rhs-37.el6rhs	0:3.3.0.5rhs-37.el6rhs

Show 11 moreShow less

Affected packages
Package	Affected	Fixed
`glusterfs-devel` Red Hat:storage:2.0:server:el6	before 0:3.3.0.5rhs-37.el6rhs	0:3.3.0.5rhs-37.el6rhs
`glusterfs-fuse` Red Hat:storage:2.0:server:el6	before 0:3.3.0.5rhs-37.el6rhs	0:3.3.0.5rhs-37.el6rhs
`glusterfs-geo-replication` Red Hat:storage:2.0:server:el6	before 0:3.3.0.5rhs-37.el6rhs	0:3.3.0.5rhs-37.el6rhs
`glusterfs-rdma` Red Hat:storage:2.0:server:el6	before 0:3.3.0.5rhs-37.el6rhs	0:3.3.0.5rhs-37.el6rhs
`glusterfs-server` Red Hat:storage:2.0:server:el6	before 0:3.3.0.5rhs-37.el6rhs	0:3.3.0.5rhs-37.el6rhs
`sos` Red Hat:storage:2.0:server:el6	before 0:2.2-17.1.el6rhs	0:2.2-17.1.el6rhs
`glusterfs` Red Hat:storage:3:client:el6	before 0:3.3.0.5rhs-37.el6	0:3.3.0.5rhs-37.el6
`glusterfs-debuginfo` Red Hat:storage:3:client:el6	before 0:3.3.0.5rhs-37.el6	0:3.3.0.5rhs-37.el6
`glusterfs-devel` Red Hat:storage:3:client:el6	before 0:3.3.0.5rhs-37.el6	0:3.3.0.5rhs-37.el6
`glusterfs-fuse` Red Hat:storage:3:client:el6	before 0:3.3.0.5rhs-37.el6	0:3.3.0.5rhs-37.el6
`glusterfs-rdma` Red Hat:storage:3:client:el6	before 0:3.3.0.5rhs-37.el6	0:3.3.0.5rhs-37.el6

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-4417 is a low vulnerability (CVSS 3.6) in Gluster Glusterfs, published November 18, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in glusterfs 3.2.7-5.

References

Show 15 moreShow less