A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name in the `/tmp` directory. This vulnerability allows the local user to overwrite arbitrary files on the system, potentially leading to system compromise or data corruption.
CVE-2013-0261
CVSS base score
8.8 (v3.1)
Severity
HIGH
Attack vector
Local
Weakness
CWE-59, CWE-264
Last modified
October 30, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
openstack essex
openstack folsom
References
- rhn.redhat.com Vendor Advisory
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com
- rhn.redhat.com Vendor Advisory
- bugzilla.redhat.com