CVE-2012-5635

First published: Wed Dec 12 2012(Updated: )

Following the fixing of several /tmp/ flaws in <a href="https://access.redhat.com/security/cve/CVE-2012-4417">CVE-2012-4417</a> we have the remaining issues in Gluster reported by Kurt Seifried (kseifried): ============== This issue was previously not reported: This should probably use /var/run/gluster/glusterdump.%d.options tests/volume.rc: rm -f /tmp/glusterdump.$mount_pid.dump.* 2&gt;/dev/null tests/volume.rc: fname=$(ls /tmp | grep -E "glusterdump.$mount_pid.dump.*") tests/volume.rc: echo /tmp/$fname ============== ============== This issue was previously not reported: This should use mktemp Also this should use cp instead of mv so you don't lose SELinux context when copying the file back to /etc/samba/smb.conf which might break Samba extras/hook-scripts/S30samba-stop.sh: cp /etc/samba/smb.conf /tmp/smb.conf extras/hook-scripts/S30samba-stop.sh: sed -i "/gluster-$volname/,/^$/d" /tmp/smb.conf &amp;&amp;\ extras/hook-scripts/S30samba-stop.sh: mv /tmp/smb.conf /etc/samba/smb.conf ============== ============== This issue was previously reported: This should use mkstemp() libglusterfs/src/run.c: fd = open ("/tmp/foof", O_WRONLY|O_CREAT|O_TRUNC, 0600); ============== ============== This issue was previously reported: This should probably use /var/run/gluster/glusterdump.%d.options libglusterfs/src/statedump.c:/* These options are dumped by default if /tmp/glusterdump.options libglusterfs/src/statedump.c: /* glusterd will create a file /tmp/glusterdump.&lt;pid&gt;.options and libglusterfs/src/statedump.c: both cli command and SIGUSR1, /tmp/glusterdump.options file libglusterfs/src/statedump.c: "/tmp/glusterdump.options"); libglusterfs/src/statedump.c: "/tmp/glusterdump.%d.options", getpid ()); libglusterfs/src/statedump.c: ((ctx-&gt;statedump_path != NULL)?ctx-&gt;statedump_path:"/tmp")), ============== ============== This issue was previously reported: This should probably use /var/run/gluster/glusterdump.%d.options xlators/protocol/server/src/server.c: .default_value = "/tmp", xlators/protocol/server/src/server.c: " statedumps. By default it is the /tmp directory" ============== ============== This issue was previously reported: This should probably use /var/run/gluster/%s-"RB_CLIENT_MOUNTPOINT xlators/mgmt/glusterd/src/glusterd-replace-brick.c: snprintf (path, len, "/tmp/%s-"RB_CLIENT_MOUNTPOINT, volinfo-&gt;volname); ============== ============== This issue was previously reported: This should probably use /var/run/gluster/glusterdump.%d.options xlators/mgmt/glusterd/src/glusterd-utils.c: snprintf (dumpoptions_path, sizeof (dumpoptions_path), "/tmp/glusterdump.%d.options", pid); xlators/mgmt/glusterd/src/glusterd-utils.c: snprintf (dumpoptions_path, sizeof (dumpoptions_path), "/tmp/glusterdump.%d.options", pid); ==============

Credit: secalert@redhat.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• agent/softwarecombine
• agent/first-publish-date
• collector/mitre-cve
• source/MITRE
• collector/redhat-bugzilla
• source/Red Hat
• alias/CVE-2012-5635
• agent/last-modified-date
• agent/weakness
• agent/severity
• agent/references
• agent/author
• agent/tags
• agent/description
• agent/event
• agent/trending
• vendor/gluster
• canonical/gluster glusterfs
• vendor/redhat
• canonical/redhat storage management console
• version/redhat storage management console/2.0
• canonical/redhat storage native client
• canonical/redhat storage server
• version/redhat storage server/2.0