{"id":"CVE-2012-5635","aliases":["DEBIAN-CVE-2012-5635","EUVD-2012-5519","GHSA-w74w-4wpp-3vmm","RHSA-2013:0691"],"status":"published","title":"The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server...","description":"The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00317,"percentile":0.24777,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2013-04-09T20:00:00Z","modified":"2026-10-23T17:47:39Z","fixes":[{"ecosystem":"Debian:12","package":"glusterfs","fixed_in":["3.5.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glusterfs","fixed_in":["3.5.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glusterfs","fixed_in":["3.5.0-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-1"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"appliance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"appliance-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"augeas-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"augeas-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"augeas-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"gluster-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.8-5.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"gluster-swift-account","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.8-5.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"gluster-swift-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.8-5.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"gluster-swift-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.8-5.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"gluster-swift-object","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.8-5.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"gluster-swift-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.8-5.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"glusterfs-geo-replication","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"glusterfs-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6_3.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6_3.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6_3.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6_3.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6_3.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6_3.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"rhn-check","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-73.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"rhn-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-73.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"rhn-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-73.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"rhn-setup-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-73.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-4.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"sanlock-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-4.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"sanlock-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-4.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"sanlock-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-4.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"sanlock-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-4.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"sos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2-17.2.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-debug-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-hook-faqemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-hook-vhostmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-reg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-dbscripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-genericapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-jboss-deps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-notification-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-restapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-tools-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-userportal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-webadmin-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"vdsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"vdsm-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6"}]}],"bundled":3}],"products":[{"vendor":"gluster","product":"glusterfs"},{"vendor":"redhat","product":"storage_management_console"},{"vendor":"redhat","product":"storage_native_client"},{"vendor":"redhat","product":"storage_server"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2013-0691.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=886364","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5635","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0691","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-5635","tags":["report"]},{"url":"https://github.com/advisories/GHSA-w74w-4wpp-3vmm"},{"url":"https://security-tracker.debian.org/tracker/CVE-2012-5635","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/knowledge/docs/Red_Hat_Storage/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=854757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=856206","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=859387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=869724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=876679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=883590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=887010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=895841","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=902213","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=922572","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=923674","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0691.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-4406","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-4406","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4406","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5635","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-5638","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5638","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5638","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2012-5635","description":"The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.","status":"published","published":"2013-04-09T20:00:00Z","modified":"2024-08-06T21:14:16.167Z","updated_at":"2026-11-02T14:34:49.246229Z"}],"euvd":[{"id":"EUVD-2012-5519","description":"The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.","status":"published","published":"2013-04-09T20:00:00Z","modified":"2024-08-06T21:14:16Z","updated_at":"2026-11-03T01:56:04.46975Z"}],"ghsa":[{"id":"GHSA-w74w-4wpp-3vmm","title":"The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server...","description":"The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.","status":"published","published":"2022-05-17T05:12:04Z","modified":"2023-02-10T05:06:56Z","updated_at":"2026-11-02T14:54:03.327923Z"}],"nvd":[{"id":"CVE-2012-5635","description":"The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.","status":"published","published":"2013-04-09T20:55:01.397Z","modified":"2026-06-16T23:47:07.823Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:17.375282Z"}],"osv":[{"id":"CVE-2012-5635","description":"The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.","status":"published","published":"2013-04-09T20:55:01Z","modified":"2026-04-10T03:44:20.1379Z","updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2012-5635","description":"The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.","status":"published","published":"2013-04-09T20:55:01.397Z","modified":"2026-10-23T17:47:39.39220488Z","updated_at":"2026-11-02T15:45:25.218101Z"},{"id":"RHSA-2013:0691","title":"Red Hat Security Advisory: Red Hat Storage 2.0 security, bug fix, and enhancement update #4","status":"published","published":"2024-09-13T08:02:16Z","modified":"2026-08-08T10:15:06.301688175Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}