Arbitrary File Overwrite

glusterfs is vulnerable to arbitrary file overwrite attacks. The vulnerability exists as Red Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the 1 e, 2 local-bricks.list, 3 bricks.err, or 4 limits.conf files in /tmp...

Code injection

Red Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the 1 e, 2 local-bricks.list, 3 bricks.err, or 4 limits.conf files in /tmp...

CVE-2013-4157

CVE-2013-4157 affects Red Hat Storage 2.0. The issue is a local symlink attack allowing local users to overwrite arbitrary files in /tmp via symlinks to (1) e, (2) local-bricks.list, (3) bricks.err, or (4) limits.conf. Root cause: insecure temporary file handling enabling arbitrary file overwrite...