{"id":"CVE-2012-5638","aliases":["DEBIAN-CVE-2012-5638","EUVD-2012-5522","GHSA-48rw-xq3g-hfw6","RHBA-2012:1507","RHSA-2013:0691","UBUNTU-CVE-2012-5638"],"status":"published","title":"The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log...","description":"The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.","severity":{"version":"2.0","score":3.6,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00335,"percentile":0.26978,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2012-12-20T11:00:00Z","modified":"2026-10-23T17:47:47Z","fixes":[{"ecosystem":"Debian:12","package":"sanlock","fixed_in":["2.2-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sanlock","fixed_in":["2.2-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sanlock","fixed_in":["2.2-2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"sanlock","fixed_in":["0:2.3-4.el6_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"sanlock-debuginfo","fixed_in":["0:2.3-4.el6_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"sanlock-devel","fixed_in":["0:2.3-4.el6_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"sanlock-lib","fixed_in":["0:2.3-4.el6_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"sanlock-python","fixed_in":["0:2.3-4.el6_3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-4.el6_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"sanlock-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-4.el6_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"sanlock-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-4.el6_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"sanlock-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-4.el6_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"sanlock-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-4.el6_3"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"appliance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"appliance-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"augeas-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"augeas-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"augeas-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"gluster-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.8-5.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"gluster-swift-account","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.8-5.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"gluster-swift-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.8-5.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"gluster-swift-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.8-5.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"gluster-swift-object","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.8-5.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"gluster-swift-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.8-5.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"glusterfs-geo-replication","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"glusterfs-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6_3.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6_3.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6_3.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6_3.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6_3.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.10-21.el6_3.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"rhn-check","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-73.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"rhn-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-73.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"rhn-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-73.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"rhn-setup-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-73.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-4.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"sanlock-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-4.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"sanlock-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-4.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"sanlock-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-4.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"sanlock-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3-4.el6_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"sos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2-17.2.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-debug-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-hook-faqemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-hook-vhostmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:server:el6","package":"vdsm-reg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-dbscripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-genericapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-jboss-deps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-notification-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-restapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-tools-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-userportal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"rhsc-webadmin-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.techpreview1-4.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"vdsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:2.0:console:el6","package":"vdsm-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.6-20.el6rhs"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0.7rhs-1.el6"}]}],"bundled":3}],"products":[{"vendor":"ovirt","product":"sanlock"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2013-0691.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=887010","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5638","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-48rw-xq3g-hfw6"},{"url":"https://security-tracker.debian.org/tracker/CVE-2012-5638","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2012:1507","tags":["advisory"]},{"url":"https://rhn.redhat.com/errata/RHBA-2012-1505.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=840953","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=840955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=841991","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=841992","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=841994","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=841995","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=849181","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=849183","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=849184","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=849186","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhba-2012_1507.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-5638","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5638","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0691","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/knowledge/docs/Red_Hat_Storage/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=854757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=856206","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=859387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=869724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=876679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=883590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=886364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=895841","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=902213","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=922572","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=923674","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0691.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-4406","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-4406","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4406","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-5635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5635","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5635","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2012-5638","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2012-5638","description":"The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.","status":"published","published":"2012-12-20T11:00:00Z","modified":"2024-08-06T21:14:16.192Z","updated_at":"2026-11-02T14:34:49.600255Z"}],"euvd":[{"id":"EUVD-2012-5522","description":"The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.","status":"published","published":"2012-12-20T11:00:00Z","modified":"2024-08-06T21:14:16Z","updated_at":"2026-11-03T01:56:04.46975Z"}],"ghsa":[{"id":"GHSA-48rw-xq3g-hfw6","title":"The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log...","description":"The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.","status":"published","published":"2022-05-17T05:12:00Z","modified":"2023-01-28T05:03:31Z","updated_at":"2026-11-02T14:43:59.810751Z"}],"nvd":[{"id":"CVE-2012-5638","description":"The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.","status":"published","published":"2012-12-20T12:02:18.637Z","modified":"2026-06-16T23:47:08.057Z","cvss":[{"version":"2.0","score":3.6,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:16.958223Z"}],"osv":[{"id":"CVE-2012-5638","description":"The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.","status":"published","published":"2012-12-20T12:02:18Z","modified":"2026-04-10T03:42:32.646464Z","updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2012-5638","description":"The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.","status":"published","published":"2012-12-20T12:02:18.637Z","modified":"2026-10-23T17:47:47.653379304Z","updated_at":"2026-11-02T15:45:25.218101Z"},{"id":"RHBA-2012:1507","title":"Red Hat Bug Fix Advisory: sanlock bug fix and enhancement update","status":"published","published":"2024-09-13T07:59:14Z","modified":"2026-06-28T10:05:33Z","updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHSA-2013:0691","title":"Red Hat Security Advisory: Red Hat Storage 2.0 security, bug fix, and enhancement update #4","status":"published","published":"2024-09-13T08:02:16Z","modified":"2026-08-08T10:15:06.301688175Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"UBUNTU-CVE-2012-5638","description":"The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restrictions via standard filesystem write operations.","status":"withdrawn","published":"2012-12-20T12:02:00Z","modified":"2025-07-16T07:17:03.416428Z","updated_at":"2026-11-02T15:54:06.854805Z"}]}}