CVE-2013-0261 Packstack: packstack: arbitrary file overwrite via symlink attack
A local attacker can exploit a symlink attack on a predictable temporary file to overwrite arbitrary system files, potentially compromising the system.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2013-0261?
CVE-2013-0261 is a high-severity path traversal vulnerability in Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse), published on 8 Mar 2013. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name in the `/tmp` directory. This vulnerability allows the local user to overwrite arbitrary files on the system, potentially leading to system compromise or data corruption.
Which versions are affected by CVE-2013-0261?
It affects 2 products.
Products include Openstack Essex, Openstack Folsom.
How do I fix CVE-2013-0261?
Apply the vendor's patch.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2013-0261 being exploited?
There is no known exploitation of CVE-2013-0261 in the wild and no public exploit code.
Other vulnerabilities in Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)
- CVE-2013-0266 Information disclosure in Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)
- CVE-2012-4573 OpenStack Glance arbitrary deletion of non-protected images
- CVE-2012-5482 OpenStack Glance arbitrary deletion of non-protected images
- CVE-2012-3360 OpenStack Nova Directory traversal vulnerability
- CVE-2012-5571 Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling
Sources
Also known as GHSA-846g-25mr-v9p5.