RHSA-2012:1456 Red Hat Security Advisory: Red Hat Storage 2.0 security, bug fix, and enhancement update #3

Bulletin has no description...

Arbitrary File Overwrite

glusterfs is vulnerable to arbitrary file overwrite attacks. The vulnerability exists as Red Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the 1 e, 2 local-bricks.list, 3 bricks.err, or 4 limits.conf files in /tmp...

Code injection

Red Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the 1 e, 2 local-bricks.list, 3 bricks.err, or 4 limits.conf files in /tmp...

CVE-2013-4157

CVE-2013-4157 affects Red Hat Storage 2.0. The issue is a local symlink attack allowing local users to overwrite arbitrary files in /tmp via symlinks to (1) e, (2) local-bricks.list, (3) bricks.err, or (4) limits.conf. Root cause: insecure temporary file handling enabling arbitrary file overwrite...