{"id":"CVE-2013-0261","title":"Packstack: packstack: arbitrary file overwrite via symlink attack","summary":"A flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name in the `/tmp` directory. This vulnerability allows the local user to overwrite arbitrary files on the system, potentia…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-59"],"vendor":"Red Hat","product":"openstack-packstack","affected":["openstack-packstack (all versions)","openstack-packstack (all versions)","openstack-packstack (all versions)"],"published":"2013-03-08","updated":"2026-10-30","sourceUpdated":"2026-10-30T18:03:44.934Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2013-0261","references":[{"url":"http://rhn.redhat.com/errata/RHSA-2013-0595.html"},{"url":"https://access.redhat.com/errata/RHSA-2013:0595","label":"RHSA-2013:0595"},{"url":"https://access.redhat.com/security/cve/CVE-2013-0261"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=908101"}],"tags":["cve.org"],"epss":0.00343,"epssPercentile":0.27983,"ingestedAt":"2026-11-05T16:24:31.292Z","slug":"CVE-2013-0261","body":"## Overview\n\nA flaw was found in PackStack. A local user could exploit a symlink attack on a temporary file with a predictable name in the `/tmp` directory. This vulnerability allows the local user to overwrite arbitrary files on the system, potentially leading to system compromise or data corruption.\n\n## Affected\n\n- `openstack-packstack (all versions)`\n- `openstack-packstack (all versions)`\n- `openstack-packstack (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}