CVE-2012-5638: The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, wh...

Security readout for executives and security teams

CVE-2012-5638 is a local file-permission flaw in SANLock. The log file /var/log/sanlock.log was world-writable, letting local users overwrite log content or bypass intended disk-quota controls. This is not described as remote compromise in the provided sources. Exposure is limited to systems running vulnerable SANLock packages. The bundle does not identify exact affected versions or CPEs, but includes a Red Hat security advisory reference, so Red Hat environments using SANLock should be checked first. Treat this as a targeted hygiene fix, not an emergency internet-facing incident, based on the available evidence. Prioritize affected shared Linux virtualization or clustering hosts where local users exist. Mitigation focus: Review and apply Red Hat RHSA-2013:0691 if the system uses SANLock.; Check current SANLock vendor guidance for corrected package versions.; Prioritize shared or multi-user hosts using SANLock..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.