CVE-2012-4417: Low severity gluster GlusterFS vulnerability
GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
Other sources
Jim Meyering (meyering) of Red Hat reports:
glusterfs writes to predictably-named files in /tmp using the PID and other non random or easily guessed information to create file names.
libglusterfs/src/statedump.c
gfprocdumpopen (char dumpdir, char brickname) { char path[PATHMAX] = {0,}; int dumpfd = -1;
snprintf (path, sizeof (path), "%s/%s.%d.dump", (dumpdir ? dumpdir : "/tmp"), brickname, getpid());
...
gfprocdumpoptionsinit () { int ret = -1; FILE fp = NULL; char buf[256]; char dumpbuf[GFDUMPMAXBUFLEN]; char key = NULL, value = NULL; char saveptr = NULL; char dumpoptionfile[PATHMAX];
snprintf (dumpoptionfile, sizeof (dumpoptionfile), "/tmp/glusterdump.%d.options", getpid ());
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4417?
CVE-2012-4417 is classified as a medium severity vulnerability due to the potential for local users to perform unauthorized file operations.
How do I fix CVE-2012-4417?
To fix CVE-2012-4417, update GlusterFS to a version that is not vulnerable, such as versions 5.5-3, 9.2-1, 10.3-5, or 11.0-3.
Who is affected by CVE-2012-4417?
CVE-2012-4417 affects GlusterFS version 3.3.0, particularly as used in the Red Hat Storage server 2.0.
What type of attack does CVE-2012-4417 allow?
CVE-2012-4417 allows a local user to perform a symlink attack, leading to overwriting arbitrary files.
When was CVE-2012-4417 reported?
CVE-2012-4417 was reported in 2012 and affects certain versions of GlusterFS.