Arbitrary File Overwrite

2019-01-1508:59:55

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

glusterfs is vulnerable to arbitrary file overwrite attacks. The vulnerability exists as GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

CPENameOperatorVersion
glusterfseq3.3.0qa30__1.el6
glusterfseq3.3.0.2rhs__30.el6rhs
glusterfseq3.2.5__2.el6
glusterfseq3.3.0rhs__25.el6rhs
glusterfseq3.3.0qa38__1.el6
glusterfseq3.2.6__1.el6
glusterfseq3.3.0rhsvirt1__8.el6rhs
glusterfseq3.3.0qa30__1.el6
glusterfseq3.3.0.2rhs__30.el6rhs
glusterfseq3.2.5__2.el6

Name	Operator	Version
glusterfs	eq	3.3.0qa30__1.el6
glusterfs	eq	3.3.0.2rhs__30.el6rhs
glusterfs	eq	3.2.5__2.el6
glusterfs	eq	3.3.0rhs__25.el6rhs
glusterfs	eq	3.3.0qa38__1.el6
glusterfs	eq	3.2.6__1.el6
glusterfs	eq	3.3.0rhsvirt1__8.el6rhs
glusterfs	eq	3.3.0qa30__1.el6
glusterfs	eq	3.3.0.2rhs__30.el6rhs
glusterfs	eq	3.2.5__2.el6