(1) installer/basedefs.py and (2) modules/ospluginutils.py in PackStack allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=908101 | |
http://rhn.redhat.com/errata/RHSA-2013-0595.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2013-03-08 13:55
Updated : 2013-03-17 21:00
NVD link : CVE-2013-0261
Mitre link : CVE-2013-0261
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
openstack
- essex
- folsom