CVE-2013-4157

Red Hat Storage 2.0 - Arbitrary File Overwrite via Symlink Attack on Temporary Files

Title source: llm
STIX 2.1

Description

Red Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the (1) e, (2) local-bricks.list, (3) bricks.err, or (4) limits.conf files in /tmp.

References (2)

Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=986516
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1205.html

Scores

EPSS 0.0038
EPSS Percentile 30.0%

Details

CWE
CWE-59
Status published
Products (1)
redhat/storage_server 2.0
Published Oct 04, 2013
Tracked Since Feb 18, 2026