Search

Find a vulnerability

Search criteria

    6 vulnerabilities found for cman by redhat

    CVE-2008-6560 (GCVE-0-2008-6560)

    Vulnerability from nvd – Published: 2009-03-31 10:00 – Updated: 2024-08-07 11:34
    VLAI
    Summary
    Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines. NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    Date Public
    2008-11-06 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T11:34:47.082Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "cman-clusterconf-dos(49832)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49832"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://git.fedorahosted.org/git/cluster.git?p=cluster.git%3Ba=commitdiff%3Bh=67fee9128e54c6c3fc3eae306b5b501f3029c3be"
              },
              {
                "name": "FEDORA-2008-9458",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html"
              },
              {
                "name": "USN-875-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "http://www.ubuntu.com/usn/USN-875-1"
              },
              {
                "name": "FEDORA-2008-9458",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=468966"
              },
              {
                "name": "FEDORA-2008-9458",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2008-11-06T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines.  NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-08-16T14:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "cman-clusterconf-dos(49832)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49832"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://git.fedorahosted.org/git/cluster.git?p=cluster.git%3Ba=commitdiff%3Bh=67fee9128e54c6c3fc3eae306b5b501f3029c3be"
            },
            {
              "name": "FEDORA-2008-9458",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html"
            },
            {
              "name": "USN-875-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "http://www.ubuntu.com/usn/USN-875-1"
            },
            {
              "name": "FEDORA-2008-9458",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=468966"
            },
            {
              "name": "FEDORA-2008-9458",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2008-6560",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines.  NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "cman-clusterconf-dos(49832)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49832"
                },
                {
                  "name": "http://git.fedorahosted.org/git/cluster.git?p=cluster.git;a=commitdiff;h=67fee9128e54c6c3fc3eae306b5b501f3029c3be",
                  "refsource": "CONFIRM",
                  "url": "http://git.fedorahosted.org/git/cluster.git?p=cluster.git;a=commitdiff;h=67fee9128e54c6c3fc3eae306b5b501f3029c3be"
                },
                {
                  "name": "FEDORA-2008-9458",
                  "refsource": "FEDORA",
                  "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html"
                },
                {
                  "name": "USN-875-1",
                  "refsource": "UBUNTU",
                  "url": "http://www.ubuntu.com/usn/USN-875-1"
                },
                {
                  "name": "FEDORA-2008-9458",
                  "refsource": "FEDORA",
                  "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html"
                },
                {
                  "name": "https://bugzilla.redhat.com/show_bug.cgi?id=468966",
                  "refsource": "CONFIRM",
                  "url": "https://bugzilla.redhat.com/show_bug.cgi?id=468966"
                },
                {
                  "name": "FEDORA-2008-9458",
                  "refsource": "FEDORA",
                  "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2008-6560",
        "datePublished": "2009-03-31T10:00:00.000Z",
        "dateReserved": "2009-03-30T00:00:00.000Z",
        "dateUpdated": "2024-08-07T11:34:47.082Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2008-6552 (GCVE-0-2008-6552)

    Vulnerability from nvd – Published: 2009-03-30 16:00 – Updated: 2024-08-07 11:34
    VLAI
    Summary
    Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://secunia.com/advisories/32616 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2011/0416 vdb-entryx_refsource_VUPEN
    http://www.redhat.com/support/errata/RHSA-2009-13… vendor-advisoryx_refsource_REDHAT
    http://www.redhat.com/support/errata/RHSA-2011-02… vendor-advisoryx_refsource_REDHAT
    http://secunia.com/advisories/36555 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/32179 vdb-entryx_refsource_BID
    http://www.redhat.com/archives/fedora-package-ann… vendor-advisoryx_refsource_FEDORA
    http://www.vupen.com/english/advisories/2011/0417 vdb-entryx_refsource_VUPEN
    http://secunia.com/advisories/32602 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/43372 third-party-advisoryx_refsource_SECUNIA
    http://www.ubuntu.com/usn/USN-875-1 vendor-advisoryx_refsource_UBUNTU
    https://oval.cisecurity.org/repository/search/def… vdb-entrysignaturex_refsource_OVAL
    http://www.redhat.com/archives/fedora-package-ann… vendor-advisoryx_refsource_FEDORA
    http://osvdb.org/50300 vdb-entryx_refsource_OSVDB
    http://rhn.redhat.com/errata/RHSA-2009-1337.html vendor-advisoryx_refsource_REDHAT
    http://www.redhat.com/support/errata/RHSA-2011-02… vendor-advisoryx_refsource_REDHAT
    http://secunia.com/advisories/43367 third-party-advisoryx_refsource_SECUNIA
    http://www.redhat.com/archives/fedora-package-ann… vendor-advisoryx_refsource_FEDORA
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://secunia.com/advisories/36530 third-party-advisoryx_refsource_SECUNIA
    http://osvdb.org/50301 vdb-entryx_refsource_OSVDB
    http://www.redhat.com/support/errata/RHSA-2009-13… vendor-advisoryx_refsource_REDHAT
    http://osvdb.org/50299 vdb-entryx_refsource_OSVDB
    Date Public
    2008-11-07 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T11:34:47.139Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "32616",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/32616"
              },
              {
                "name": "ADV-2011-0416",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2011/0416"
              },
              {
                "name": "RHSA-2009:1341",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/support/errata/RHSA-2009-1341.html"
              },
              {
                "name": "RHSA-2011:0264",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/support/errata/RHSA-2011-0264.html"
              },
              {
                "name": "36555",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/36555"
              },
              {
                "name": "32179",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/32179"
              },
              {
                "name": "FEDORA-2008-9458",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html"
              },
              {
                "name": "ADV-2011-0417",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2011/0417"
              },
              {
                "name": "32602",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/32602"
              },
              {
                "name": "43372",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/43372"
              },
              {
                "name": "USN-875-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "http://www.ubuntu.com/usn/USN-875-1"
              },
              {
                "name": "oval:org.mitre.oval:def:11404",
                "tags": [
                  "vdb-entry",
                  "signature",
                  "x_refsource_OVAL",
                  "x_transferred"
                ],
                "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11404"
              },
              {
                "name": "FEDORA-2008-9458",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html"
              },
              {
                "name": "50300",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/50300"
              },
              {
                "name": "RHSA-2009:1337",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "http://rhn.redhat.com/errata/RHSA-2009-1337.html"
              },
              {
                "name": "RHSA-2011:0265",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/support/errata/RHSA-2011-0265.html"
              },
              {
                "name": "43367",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/43367"
              },
              {
                "name": "FEDORA-2008-9458",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html"
              },
              {
                "name": "clusterproject-unspecified-priv-escalation(46412)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46412"
              },
              {
                "name": "36530",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/36530"
              },
              {
                "name": "50301",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/50301"
              },
              {
                "name": "RHSA-2009:1339",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/support/errata/RHSA-2009-1339.html"
              },
              {
                "name": "50299",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/50299"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2008-11-07T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-09-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "32616",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/32616"
            },
            {
              "name": "ADV-2011-0416",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2011/0416"
            },
            {
              "name": "RHSA-2009:1341",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2009-1341.html"
            },
            {
              "name": "RHSA-2011:0264",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0264.html"
            },
            {
              "name": "36555",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/36555"
            },
            {
              "name": "32179",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/32179"
            },
            {
              "name": "FEDORA-2008-9458",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html"
            },
            {
              "name": "ADV-2011-0417",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2011/0417"
            },
            {
              "name": "32602",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/32602"
            },
            {
              "name": "43372",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/43372"
            },
            {
              "name": "USN-875-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "http://www.ubuntu.com/usn/USN-875-1"
            },
            {
              "name": "oval:org.mitre.oval:def:11404",
              "tags": [
                "vdb-entry",
                "signature",
                "x_refsource_OVAL"
              ],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11404"
            },
            {
              "name": "FEDORA-2008-9458",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html"
            },
            {
              "name": "50300",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/50300"
            },
            {
              "name": "RHSA-2009:1337",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "http://rhn.redhat.com/errata/RHSA-2009-1337.html"
            },
            {
              "name": "RHSA-2011:0265",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0265.html"
            },
            {
              "name": "43367",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/43367"
            },
            {
              "name": "FEDORA-2008-9458",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html"
            },
            {
              "name": "clusterproject-unspecified-priv-escalation(46412)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46412"
            },
            {
              "name": "36530",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/36530"
            },
            {
              "name": "50301",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/50301"
            },
            {
              "name": "RHSA-2009:1339",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2009-1339.html"
            },
            {
              "name": "50299",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/50299"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2008-6552",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "32616",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/32616"
                },
                {
                  "name": "ADV-2011-0416",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2011/0416"
                },
                {
                  "name": "RHSA-2009:1341",
                  "refsource": "REDHAT",
                  "url": "http://www.redhat.com/support/errata/RHSA-2009-1341.html"
                },
                {
                  "name": "RHSA-2011:0264",
                  "refsource": "REDHAT",
                  "url": "http://www.redhat.com/support/errata/RHSA-2011-0264.html"
                },
                {
                  "name": "36555",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/36555"
                },
                {
                  "name": "32179",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/32179"
                },
                {
                  "name": "FEDORA-2008-9458",
                  "refsource": "FEDORA",
                  "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html"
                },
                {
                  "name": "ADV-2011-0417",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2011/0417"
                },
                {
                  "name": "32602",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/32602"
                },
                {
                  "name": "43372",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/43372"
                },
                {
                  "name": "USN-875-1",
                  "refsource": "UBUNTU",
                  "url": "http://www.ubuntu.com/usn/USN-875-1"
                },
                {
                  "name": "oval:org.mitre.oval:def:11404",
                  "refsource": "OVAL",
                  "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11404"
                },
                {
                  "name": "FEDORA-2008-9458",
                  "refsource": "FEDORA",
                  "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html"
                },
                {
                  "name": "50300",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/50300"
                },
                {
                  "name": "RHSA-2009:1337",
                  "refsource": "REDHAT",
                  "url": "http://rhn.redhat.com/errata/RHSA-2009-1337.html"
                },
                {
                  "name": "RHSA-2011:0265",
                  "refsource": "REDHAT",
                  "url": "http://www.redhat.com/support/errata/RHSA-2011-0265.html"
                },
                {
                  "name": "43367",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/43367"
                },
                {
                  "name": "FEDORA-2008-9458",
                  "refsource": "FEDORA",
                  "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html"
                },
                {
                  "name": "clusterproject-unspecified-priv-escalation(46412)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46412"
                },
                {
                  "name": "36530",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/36530"
                },
                {
                  "name": "50301",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/50301"
                },
                {
                  "name": "RHSA-2009:1339",
                  "refsource": "REDHAT",
                  "url": "http://www.redhat.com/support/errata/RHSA-2009-1339.html"
                },
                {
                  "name": "50299",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/50299"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2008-6552",
        "datePublished": "2009-03-30T16:00:00.000Z",
        "dateReserved": "2009-03-30T00:00:00.000Z",
        "dateUpdated": "2024-08-07T11:34:47.139Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2008-4192 (GCVE-0-2008-4192)

    Vulnerability from nvd – Published: 2008-09-29 17:00 – Updated: 2024-08-07 10:08
    VLAI
    Summary
    The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://www.securityfocus.com/bid/30898 vdb-entryx_refsource_BID
    http://secunia.com/advisories/32390 third-party-advisoryx_refsource_SECUNIA
    http://www.openwall.com/lists/oss-security/2008/10/30/2 mailing-listx_refsource_MLIST
    http://dev.gentoo.org/~rbu/security/debiantemp/cman x_refsource_CONFIRM
    http://secunia.com/advisories/32387 third-party-advisoryx_refsource_SECUNIA
    https://bugs.gentoo.org/show_bug.cgi?id=235770 x_refsource_CONFIRM
    http://secunia.com/advisories/31887 third-party-advisoryx_refsource_SECUNIA
    http://uvw.ru/report.lenny.txt x_refsource_MISC
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.vupen.com/english/advisories/2011/0419 vdb-entryx_refsource_VUPEN
    http://www.ubuntu.com/usn/USN-875-1 vendor-advisoryx_refsource_UBUNTU
    https://bugzilla.redhat.com/show_bug.cgi?id=460476 x_refsource_CONFIRM
    http://www.openwall.com/lists/oss-security/2008/09/18/3 mailing-listx_refsource_MLIST
    http://www.openwall.com/lists/oss-security/2008/09/24/2 mailing-listx_refsource_MLIST
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496410 x_refsource_CONFIRM
    https://www.redhat.com/archives/fedora-package-an… vendor-advisoryx_refsource_FEDORA
    http://secunia.com/advisories/43362 third-party-advisoryx_refsource_SECUNIA
    http://www.redhat.com/support/errata/RHSA-2011-02… vendor-advisoryx_refsource_REDHAT
    Date Public
    2008-09-18 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T10:08:34.854Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "30898",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/30898"
              },
              {
                "name": "32390",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/32390"
              },
              {
                "name": "[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2008/10/30/2"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://dev.gentoo.org/~rbu/security/debiantemp/cman"
              },
              {
                "name": "32387",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/32387"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://bugs.gentoo.org/show_bug.cgi?id=235770"
              },
              {
                "name": "31887",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/31887"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://uvw.ru/report.lenny.txt"
              },
              {
                "name": "cman-fenceegenera-symlink(44845)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44845"
              },
              {
                "name": "ADV-2011-0419",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2011/0419"
              },
              {
                "name": "USN-875-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "http://www.ubuntu.com/usn/USN-875-1"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=460476"
              },
              {
                "name": "[oss-security] 20080918 CVE Request (openswan, emacspeak, cman)",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2008/09/18/3"
              },
              {
                "name": "[oss-security] 20080923 Re: CVE Request (openswan, emacspeak, cman)",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2008/09/24/2"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496410"
              },
              {
                "name": "FEDORA-2008-9042",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00666.html"
              },
              {
                "name": "43362",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/43362"
              },
              {
                "name": "RHSA-2011:0266",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/support/errata/RHSA-2011-0266.html"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2008-09-18T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-08-07T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "30898",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/30898"
            },
            {
              "name": "32390",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/32390"
            },
            {
              "name": "[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2008/10/30/2"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://dev.gentoo.org/~rbu/security/debiantemp/cman"
            },
            {
              "name": "32387",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/32387"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://bugs.gentoo.org/show_bug.cgi?id=235770"
            },
            {
              "name": "31887",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/31887"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://uvw.ru/report.lenny.txt"
            },
            {
              "name": "cman-fenceegenera-symlink(44845)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44845"
            },
            {
              "name": "ADV-2011-0419",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2011/0419"
            },
            {
              "name": "USN-875-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "http://www.ubuntu.com/usn/USN-875-1"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=460476"
            },
            {
              "name": "[oss-security] 20080918 CVE Request (openswan, emacspeak, cman)",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2008/09/18/3"
            },
            {
              "name": "[oss-security] 20080923 Re: CVE Request (openswan, emacspeak, cman)",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2008/09/24/2"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496410"
            },
            {
              "name": "FEDORA-2008-9042",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00666.html"
            },
            {
              "name": "43362",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/43362"
            },
            {
              "name": "RHSA-2011:0266",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0266.html"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2008-4192",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "30898",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/30898"
                },
                {
                  "name": "32390",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/32390"
                },
                {
                  "name": "[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire",
                  "refsource": "MLIST",
                  "url": "http://www.openwall.com/lists/oss-security/2008/10/30/2"
                },
                {
                  "name": "http://dev.gentoo.org/~rbu/security/debiantemp/cman",
                  "refsource": "CONFIRM",
                  "url": "http://dev.gentoo.org/~rbu/security/debiantemp/cman"
                },
                {
                  "name": "32387",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/32387"
                },
                {
                  "name": "https://bugs.gentoo.org/show_bug.cgi?id=235770",
                  "refsource": "CONFIRM",
                  "url": "https://bugs.gentoo.org/show_bug.cgi?id=235770"
                },
                {
                  "name": "31887",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/31887"
                },
                {
                  "name": "http://uvw.ru/report.lenny.txt",
                  "refsource": "MISC",
                  "url": "http://uvw.ru/report.lenny.txt"
                },
                {
                  "name": "cman-fenceegenera-symlink(44845)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44845"
                },
                {
                  "name": "ADV-2011-0419",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2011/0419"
                },
                {
                  "name": "USN-875-1",
                  "refsource": "UBUNTU",
                  "url": "http://www.ubuntu.com/usn/USN-875-1"
                },
                {
                  "name": "https://bugzilla.redhat.com/show_bug.cgi?id=460476",
                  "refsource": "CONFIRM",
                  "url": "https://bugzilla.redhat.com/show_bug.cgi?id=460476"
                },
                {
                  "name": "[oss-security] 20080918 CVE Request (openswan, emacspeak, cman)",
                  "refsource": "MLIST",
                  "url": "http://www.openwall.com/lists/oss-security/2008/09/18/3"
                },
                {
                  "name": "[oss-security] 20080923 Re: CVE Request (openswan, emacspeak, cman)",
                  "refsource": "MLIST",
                  "url": "http://www.openwall.com/lists/oss-security/2008/09/24/2"
                },
                {
                  "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496410",
                  "refsource": "CONFIRM",
                  "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496410"
                },
                {
                  "name": "FEDORA-2008-9042",
                  "refsource": "FEDORA",
                  "url": "https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00666.html"
                },
                {
                  "name": "43362",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/43362"
                },
                {
                  "name": "RHSA-2011:0266",
                  "refsource": "REDHAT",
                  "url": "http://www.redhat.com/support/errata/RHSA-2011-0266.html"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2008-4192",
        "datePublished": "2008-09-29T17:00:00.000Z",
        "dateReserved": "2008-09-23T00:00:00.000Z",
        "dateUpdated": "2024-08-07T10:08:34.854Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2008-6560 (GCVE-0-2008-6560)

    Vulnerability from cvelistv5 – Published: 2009-03-31 10:00 – Updated: 2024-08-07 11:34
    VLAI
    Summary
    Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines. NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    Date Public
    2008-11-06 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T11:34:47.082Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "cman-clusterconf-dos(49832)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49832"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://git.fedorahosted.org/git/cluster.git?p=cluster.git%3Ba=commitdiff%3Bh=67fee9128e54c6c3fc3eae306b5b501f3029c3be"
              },
              {
                "name": "FEDORA-2008-9458",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html"
              },
              {
                "name": "USN-875-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "http://www.ubuntu.com/usn/USN-875-1"
              },
              {
                "name": "FEDORA-2008-9458",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=468966"
              },
              {
                "name": "FEDORA-2008-9458",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2008-11-06T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines.  NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-08-16T14:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "cman-clusterconf-dos(49832)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49832"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://git.fedorahosted.org/git/cluster.git?p=cluster.git%3Ba=commitdiff%3Bh=67fee9128e54c6c3fc3eae306b5b501f3029c3be"
            },
            {
              "name": "FEDORA-2008-9458",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html"
            },
            {
              "name": "USN-875-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "http://www.ubuntu.com/usn/USN-875-1"
            },
            {
              "name": "FEDORA-2008-9458",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=468966"
            },
            {
              "name": "FEDORA-2008-9458",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2008-6560",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines.  NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "cman-clusterconf-dos(49832)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49832"
                },
                {
                  "name": "http://git.fedorahosted.org/git/cluster.git?p=cluster.git;a=commitdiff;h=67fee9128e54c6c3fc3eae306b5b501f3029c3be",
                  "refsource": "CONFIRM",
                  "url": "http://git.fedorahosted.org/git/cluster.git?p=cluster.git;a=commitdiff;h=67fee9128e54c6c3fc3eae306b5b501f3029c3be"
                },
                {
                  "name": "FEDORA-2008-9458",
                  "refsource": "FEDORA",
                  "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html"
                },
                {
                  "name": "USN-875-1",
                  "refsource": "UBUNTU",
                  "url": "http://www.ubuntu.com/usn/USN-875-1"
                },
                {
                  "name": "FEDORA-2008-9458",
                  "refsource": "FEDORA",
                  "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html"
                },
                {
                  "name": "https://bugzilla.redhat.com/show_bug.cgi?id=468966",
                  "refsource": "CONFIRM",
                  "url": "https://bugzilla.redhat.com/show_bug.cgi?id=468966"
                },
                {
                  "name": "FEDORA-2008-9458",
                  "refsource": "FEDORA",
                  "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2008-6560",
        "datePublished": "2009-03-31T10:00:00.000Z",
        "dateReserved": "2009-03-30T00:00:00.000Z",
        "dateUpdated": "2024-08-07T11:34:47.082Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2008-6552 (GCVE-0-2008-6552)

    Vulnerability from cvelistv5 – Published: 2009-03-30 16:00 – Updated: 2024-08-07 11:34
    VLAI
    Summary
    Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://secunia.com/advisories/32616 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2011/0416 vdb-entryx_refsource_VUPEN
    http://www.redhat.com/support/errata/RHSA-2009-13… vendor-advisoryx_refsource_REDHAT
    http://www.redhat.com/support/errata/RHSA-2011-02… vendor-advisoryx_refsource_REDHAT
    http://secunia.com/advisories/36555 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/32179 vdb-entryx_refsource_BID
    http://www.redhat.com/archives/fedora-package-ann… vendor-advisoryx_refsource_FEDORA
    http://www.vupen.com/english/advisories/2011/0417 vdb-entryx_refsource_VUPEN
    http://secunia.com/advisories/32602 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/43372 third-party-advisoryx_refsource_SECUNIA
    http://www.ubuntu.com/usn/USN-875-1 vendor-advisoryx_refsource_UBUNTU
    https://oval.cisecurity.org/repository/search/def… vdb-entrysignaturex_refsource_OVAL
    http://www.redhat.com/archives/fedora-package-ann… vendor-advisoryx_refsource_FEDORA
    http://osvdb.org/50300 vdb-entryx_refsource_OSVDB
    http://rhn.redhat.com/errata/RHSA-2009-1337.html vendor-advisoryx_refsource_REDHAT
    http://www.redhat.com/support/errata/RHSA-2011-02… vendor-advisoryx_refsource_REDHAT
    http://secunia.com/advisories/43367 third-party-advisoryx_refsource_SECUNIA
    http://www.redhat.com/archives/fedora-package-ann… vendor-advisoryx_refsource_FEDORA
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://secunia.com/advisories/36530 third-party-advisoryx_refsource_SECUNIA
    http://osvdb.org/50301 vdb-entryx_refsource_OSVDB
    http://www.redhat.com/support/errata/RHSA-2009-13… vendor-advisoryx_refsource_REDHAT
    http://osvdb.org/50299 vdb-entryx_refsource_OSVDB
    Date Public
    2008-11-07 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T11:34:47.139Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "32616",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/32616"
              },
              {
                "name": "ADV-2011-0416",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2011/0416"
              },
              {
                "name": "RHSA-2009:1341",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/support/errata/RHSA-2009-1341.html"
              },
              {
                "name": "RHSA-2011:0264",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/support/errata/RHSA-2011-0264.html"
              },
              {
                "name": "36555",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/36555"
              },
              {
                "name": "32179",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/32179"
              },
              {
                "name": "FEDORA-2008-9458",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html"
              },
              {
                "name": "ADV-2011-0417",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2011/0417"
              },
              {
                "name": "32602",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/32602"
              },
              {
                "name": "43372",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/43372"
              },
              {
                "name": "USN-875-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "http://www.ubuntu.com/usn/USN-875-1"
              },
              {
                "name": "oval:org.mitre.oval:def:11404",
                "tags": [
                  "vdb-entry",
                  "signature",
                  "x_refsource_OVAL",
                  "x_transferred"
                ],
                "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11404"
              },
              {
                "name": "FEDORA-2008-9458",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html"
              },
              {
                "name": "50300",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/50300"
              },
              {
                "name": "RHSA-2009:1337",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "http://rhn.redhat.com/errata/RHSA-2009-1337.html"
              },
              {
                "name": "RHSA-2011:0265",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/support/errata/RHSA-2011-0265.html"
              },
              {
                "name": "43367",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/43367"
              },
              {
                "name": "FEDORA-2008-9458",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html"
              },
              {
                "name": "clusterproject-unspecified-priv-escalation(46412)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46412"
              },
              {
                "name": "36530",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/36530"
              },
              {
                "name": "50301",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/50301"
              },
              {
                "name": "RHSA-2009:1339",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/support/errata/RHSA-2009-1339.html"
              },
              {
                "name": "50299",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/50299"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2008-11-07T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-09-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "32616",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/32616"
            },
            {
              "name": "ADV-2011-0416",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2011/0416"
            },
            {
              "name": "RHSA-2009:1341",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2009-1341.html"
            },
            {
              "name": "RHSA-2011:0264",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0264.html"
            },
            {
              "name": "36555",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/36555"
            },
            {
              "name": "32179",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/32179"
            },
            {
              "name": "FEDORA-2008-9458",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html"
            },
            {
              "name": "ADV-2011-0417",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2011/0417"
            },
            {
              "name": "32602",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/32602"
            },
            {
              "name": "43372",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/43372"
            },
            {
              "name": "USN-875-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "http://www.ubuntu.com/usn/USN-875-1"
            },
            {
              "name": "oval:org.mitre.oval:def:11404",
              "tags": [
                "vdb-entry",
                "signature",
                "x_refsource_OVAL"
              ],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11404"
            },
            {
              "name": "FEDORA-2008-9458",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html"
            },
            {
              "name": "50300",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/50300"
            },
            {
              "name": "RHSA-2009:1337",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "http://rhn.redhat.com/errata/RHSA-2009-1337.html"
            },
            {
              "name": "RHSA-2011:0265",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0265.html"
            },
            {
              "name": "43367",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/43367"
            },
            {
              "name": "FEDORA-2008-9458",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html"
            },
            {
              "name": "clusterproject-unspecified-priv-escalation(46412)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46412"
            },
            {
              "name": "36530",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/36530"
            },
            {
              "name": "50301",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/50301"
            },
            {
              "name": "RHSA-2009:1339",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2009-1339.html"
            },
            {
              "name": "50299",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/50299"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2008-6552",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "32616",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/32616"
                },
                {
                  "name": "ADV-2011-0416",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2011/0416"
                },
                {
                  "name": "RHSA-2009:1341",
                  "refsource": "REDHAT",
                  "url": "http://www.redhat.com/support/errata/RHSA-2009-1341.html"
                },
                {
                  "name": "RHSA-2011:0264",
                  "refsource": "REDHAT",
                  "url": "http://www.redhat.com/support/errata/RHSA-2011-0264.html"
                },
                {
                  "name": "36555",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/36555"
                },
                {
                  "name": "32179",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/32179"
                },
                {
                  "name": "FEDORA-2008-9458",
                  "refsource": "FEDORA",
                  "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html"
                },
                {
                  "name": "ADV-2011-0417",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2011/0417"
                },
                {
                  "name": "32602",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/32602"
                },
                {
                  "name": "43372",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/43372"
                },
                {
                  "name": "USN-875-1",
                  "refsource": "UBUNTU",
                  "url": "http://www.ubuntu.com/usn/USN-875-1"
                },
                {
                  "name": "oval:org.mitre.oval:def:11404",
                  "refsource": "OVAL",
                  "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11404"
                },
                {
                  "name": "FEDORA-2008-9458",
                  "refsource": "FEDORA",
                  "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html"
                },
                {
                  "name": "50300",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/50300"
                },
                {
                  "name": "RHSA-2009:1337",
                  "refsource": "REDHAT",
                  "url": "http://rhn.redhat.com/errata/RHSA-2009-1337.html"
                },
                {
                  "name": "RHSA-2011:0265",
                  "refsource": "REDHAT",
                  "url": "http://www.redhat.com/support/errata/RHSA-2011-0265.html"
                },
                {
                  "name": "43367",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/43367"
                },
                {
                  "name": "FEDORA-2008-9458",
                  "refsource": "FEDORA",
                  "url": "http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html"
                },
                {
                  "name": "clusterproject-unspecified-priv-escalation(46412)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46412"
                },
                {
                  "name": "36530",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/36530"
                },
                {
                  "name": "50301",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/50301"
                },
                {
                  "name": "RHSA-2009:1339",
                  "refsource": "REDHAT",
                  "url": "http://www.redhat.com/support/errata/RHSA-2009-1339.html"
                },
                {
                  "name": "50299",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/50299"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2008-6552",
        "datePublished": "2009-03-30T16:00:00.000Z",
        "dateReserved": "2009-03-30T00:00:00.000Z",
        "dateUpdated": "2024-08-07T11:34:47.139Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2008-4192 (GCVE-0-2008-4192)

    Vulnerability from cvelistv5 – Published: 2008-09-29 17:00 – Updated: 2024-08-07 10:08
    VLAI
    Summary
    The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://www.securityfocus.com/bid/30898 vdb-entryx_refsource_BID
    http://secunia.com/advisories/32390 third-party-advisoryx_refsource_SECUNIA
    http://www.openwall.com/lists/oss-security/2008/10/30/2 mailing-listx_refsource_MLIST
    http://dev.gentoo.org/~rbu/security/debiantemp/cman x_refsource_CONFIRM
    http://secunia.com/advisories/32387 third-party-advisoryx_refsource_SECUNIA
    https://bugs.gentoo.org/show_bug.cgi?id=235770 x_refsource_CONFIRM
    http://secunia.com/advisories/31887 third-party-advisoryx_refsource_SECUNIA
    http://uvw.ru/report.lenny.txt x_refsource_MISC
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.vupen.com/english/advisories/2011/0419 vdb-entryx_refsource_VUPEN
    http://www.ubuntu.com/usn/USN-875-1 vendor-advisoryx_refsource_UBUNTU
    https://bugzilla.redhat.com/show_bug.cgi?id=460476 x_refsource_CONFIRM
    http://www.openwall.com/lists/oss-security/2008/09/18/3 mailing-listx_refsource_MLIST
    http://www.openwall.com/lists/oss-security/2008/09/24/2 mailing-listx_refsource_MLIST
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496410 x_refsource_CONFIRM
    https://www.redhat.com/archives/fedora-package-an… vendor-advisoryx_refsource_FEDORA
    http://secunia.com/advisories/43362 third-party-advisoryx_refsource_SECUNIA
    http://www.redhat.com/support/errata/RHSA-2011-02… vendor-advisoryx_refsource_REDHAT
    Date Public
    2008-09-18 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T10:08:34.854Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "30898",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/30898"
              },
              {
                "name": "32390",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/32390"
              },
              {
                "name": "[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2008/10/30/2"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://dev.gentoo.org/~rbu/security/debiantemp/cman"
              },
              {
                "name": "32387",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/32387"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://bugs.gentoo.org/show_bug.cgi?id=235770"
              },
              {
                "name": "31887",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/31887"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://uvw.ru/report.lenny.txt"
              },
              {
                "name": "cman-fenceegenera-symlink(44845)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44845"
              },
              {
                "name": "ADV-2011-0419",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2011/0419"
              },
              {
                "name": "USN-875-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "http://www.ubuntu.com/usn/USN-875-1"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=460476"
              },
              {
                "name": "[oss-security] 20080918 CVE Request (openswan, emacspeak, cman)",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2008/09/18/3"
              },
              {
                "name": "[oss-security] 20080923 Re: CVE Request (openswan, emacspeak, cman)",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2008/09/24/2"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496410"
              },
              {
                "name": "FEDORA-2008-9042",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00666.html"
              },
              {
                "name": "43362",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/43362"
              },
              {
                "name": "RHSA-2011:0266",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/support/errata/RHSA-2011-0266.html"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2008-09-18T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-08-07T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "30898",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/30898"
            },
            {
              "name": "32390",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/32390"
            },
            {
              "name": "[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2008/10/30/2"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://dev.gentoo.org/~rbu/security/debiantemp/cman"
            },
            {
              "name": "32387",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/32387"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://bugs.gentoo.org/show_bug.cgi?id=235770"
            },
            {
              "name": "31887",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/31887"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://uvw.ru/report.lenny.txt"
            },
            {
              "name": "cman-fenceegenera-symlink(44845)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44845"
            },
            {
              "name": "ADV-2011-0419",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2011/0419"
            },
            {
              "name": "USN-875-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "http://www.ubuntu.com/usn/USN-875-1"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=460476"
            },
            {
              "name": "[oss-security] 20080918 CVE Request (openswan, emacspeak, cman)",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2008/09/18/3"
            },
            {
              "name": "[oss-security] 20080923 Re: CVE Request (openswan, emacspeak, cman)",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2008/09/24/2"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496410"
            },
            {
              "name": "FEDORA-2008-9042",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00666.html"
            },
            {
              "name": "43362",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/43362"
            },
            {
              "name": "RHSA-2011:0266",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0266.html"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2008-4192",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "30898",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/30898"
                },
                {
                  "name": "32390",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/32390"
                },
                {
                  "name": "[oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire",
                  "refsource": "MLIST",
                  "url": "http://www.openwall.com/lists/oss-security/2008/10/30/2"
                },
                {
                  "name": "http://dev.gentoo.org/~rbu/security/debiantemp/cman",
                  "refsource": "CONFIRM",
                  "url": "http://dev.gentoo.org/~rbu/security/debiantemp/cman"
                },
                {
                  "name": "32387",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/32387"
                },
                {
                  "name": "https://bugs.gentoo.org/show_bug.cgi?id=235770",
                  "refsource": "CONFIRM",
                  "url": "https://bugs.gentoo.org/show_bug.cgi?id=235770"
                },
                {
                  "name": "31887",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/31887"
                },
                {
                  "name": "http://uvw.ru/report.lenny.txt",
                  "refsource": "MISC",
                  "url": "http://uvw.ru/report.lenny.txt"
                },
                {
                  "name": "cman-fenceegenera-symlink(44845)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44845"
                },
                {
                  "name": "ADV-2011-0419",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2011/0419"
                },
                {
                  "name": "USN-875-1",
                  "refsource": "UBUNTU",
                  "url": "http://www.ubuntu.com/usn/USN-875-1"
                },
                {
                  "name": "https://bugzilla.redhat.com/show_bug.cgi?id=460476",
                  "refsource": "CONFIRM",
                  "url": "https://bugzilla.redhat.com/show_bug.cgi?id=460476"
                },
                {
                  "name": "[oss-security] 20080918 CVE Request (openswan, emacspeak, cman)",
                  "refsource": "MLIST",
                  "url": "http://www.openwall.com/lists/oss-security/2008/09/18/3"
                },
                {
                  "name": "[oss-security] 20080923 Re: CVE Request (openswan, emacspeak, cman)",
                  "refsource": "MLIST",
                  "url": "http://www.openwall.com/lists/oss-security/2008/09/24/2"
                },
                {
                  "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496410",
                  "refsource": "CONFIRM",
                  "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496410"
                },
                {
                  "name": "FEDORA-2008-9042",
                  "refsource": "FEDORA",
                  "url": "https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00666.html"
                },
                {
                  "name": "43362",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/43362"
                },
                {
                  "name": "RHSA-2011:0266",
                  "refsource": "REDHAT",
                  "url": "http://www.redhat.com/support/errata/RHSA-2011-0266.html"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2008-4192",
        "datePublished": "2008-09-29T17:00:00.000Z",
        "dateReserved": "2008-09-23T00:00:00.000Z",
        "dateUpdated": "2024-08-07T10:08:34.854Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }