GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
Synopsis
Low: Red Hat Storage 20 security, bug fix, and enhancement update #3
Type/Severity
Security Advisory: Low
Topic
Updated glusterfs packages that fix multiple security issues, several bugs,and contain enhancements are now available for Red Hat Storage 20The Red Hat Security Response Team has rated ...
Debian Bug report logs -
#704944
glusterfs: cve-2012-5635
Package:
src:glusterfs;
Maintainer for src:glusterfs is Patrick Matthäi <pmatthaei@debianorg>;
Reported by: Michael Gilbert <mgilbert@debianorg>
Date: Mon, 8 Apr 2013 02:06:02 UTC
Severity: important
Fixed in version glusterfs/350-1
Done: Patrick Matt ...
Vulmon