CVE-2013-4157

Red Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the (1) e, (2) local-bricks.list, (3) bricks.err, or (4) limits.conf files in /tmp.

• CWE-59

• http://rhn.redhat.com/errata/RHSA-2013-1205.htmlVendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=986516Patch, Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1205.htmlVendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=986516Patch, Vendor Advisory

Published

Oct 4, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4151The virtio_load function in virtio/virtio.c in QEMU 1.x befo…
• CVE-2013-4152The Spring OXM wrapper in Spring Framework before 3.2.4 and …
• CVE-2013-4153Double free vulnerability in the qemuAgentGetVCPUs function …
• CVE-2013-4154The qemuAgentCommand function in libvirt before 1.1.1, when …
• CVE-2013-4155OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana …
• CVE-2013-4156Apache OpenOffice.org (OOo) before 4.0 allows remote attacke…
• CVE-2013-4158smokeping before 2.6.9 has XSS (incomplete fix for CVE-2012-…6.1
• CVE-2013-4159ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create te…
• CVE-2013-4160Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and poss…
• CVE-2013-4161gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in…7.8
• CVE-2013-4162The udp_v6_push_pending_frames function in net/ipv6/udp.c in…
• CVE-2013-4163The ip6_append_data_mtu function in net/ipv6/ip6_output.c in…