CVE-2013-0261

Advisory

Packstack 2012.2.3 includes a fix for CVE-2013-0261: (1) installer/basedefs.py and (2) modules/ospluginutils.py in PackStack allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.
https://opendev.org/x/packstack/commit/624d49a0e8305e6613a9637437f7cdfb8a7852e9

Affected package

Affected versions

Fixed versions

Vulnerability changelog

CVE-2013-0261 OpenStack packstack: insecure use of /tmp in manifest creation See CVE-2013-0261.


MISC:RHBZ#908101: https://bugzilla.redhat.com/show_bug.cgi?id=908101
MISC:RHSA-2013:0595: http://rhn.redhat.com/errata/RHSA-2013-0595.html
MISC:RHSA-2013:0595: https://access.redhat.com/errata/RHSA-2013:0595
MISC:https://access.redhat.com/security/cve/CVE-2013-0261: https://access.redhat.com/security/cve/CVE-2013-0261

Resources

• https://bugzilla.redhat.com/show_bug.cgi?id=908101
• http://rhn.redhat.com/errata/RHSA-2013-0595.html
• https://access.redhat.com/errata/RHSA-2013:0595
• https://access.redhat.com/security/cve/CVE-2013-0261
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0261