PT-2013-4878 · Red Hat · Red Hat Storage

CVE-2013-4157

·

Publicado

2013-10-04

·

Atualizado

2023-02-13

CVSS v2.0

3.6

Baixa

VetorAV:L/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions Red Hat Storage version 2.0
Description The issue allows local users to overwrite arbitrary files via a symlink attack on certain files in /tmp, including e, local-bricks.list, bricks.err, or limits.conf.
Recommendations For Red Hat Storage version 2.0, consider restricting access to the files in /tmp to prevent a symlink attack until a patch is available. As a temporary workaround, monitor the /tmp directory for suspicious activity and restrict write access to these files to minimize the risk of exploitation.

Correção

Link Following

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2013-4157
RHSA-2013:1205

Produtos afetados

Red Hat Storage