RedHat Security Advisory RHSA-2009:1341

The remote host is missing updates announced in advisory RHSA-2009:1341. The Cluster Manager cman utility provides services for managing a Linux cluster. Multiple insecure temporary file use flaws were found in fenceapcsnmp and ccstool. A local attacker could use these flaws to overwrite an...

rgmanager security, bug fix, and enhancement update

2.0.52-1.0.1 - Update summary and description to be vendor neutral 2.0.52-1 - When vm.sh does a status check and gets 'no state' it is now treated as a running state. - Resolves: rhb514044 2.0.51-1 - In some cases virtual machines will be restarted after a successful migration when the cluster...

rgmanager: multiple insecure temporary file use issues

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager aka rgmanager before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on...

Low: Red Hat Security Advisory: rgmanager security, bug fix, and enhancement update

An updated rgmanager package that fixes multiple security issues, various bugs, and adds enhancements is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. The rgmanager package contains the Red Hat Resourc...

Low: Red Hat Security Advisory: cman security, bug fix, and enhancement update

Updated cman packages that fix several security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. The Cluster Manager cman utility provides services for...

Solaris 5.6 (sparc) : 109211-08

Sun Cluster 2.2: Comm Patch. Date this patch was last updated by Sun : Aug/31/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...

Solaris 5.8 (sparc) : 109213-06

Sun Cluster 2.2: Comm Patch. Date this patch was last updated by Sun : Aug/31/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...

Debian DSA-1776-1 : slurm-llnl - programming error

It was discovered that the Simple Linux Utility for Resource Management SLURM, a cluster job management and scheduling system, did not drop the supplemental groups. These groups may be system groups with elevated privileges, which may allow a valid SLURM user to gain elevated privileges...

Information disclosure

Unspecified vulnerability in the Cluster Ready Services component in Oracle Database 10.1.0.5 allows remote attackers to affect availability via unknown vectors...

CVE-2009-0973

Unspecified vulnerability in the Cluster Ready Services component in Oracle Database 10.1.0.5 allows remote attackers to affect availability via unknown vectors...

CVE-2009-0973

Unspecified vulnerability in the Cluster Ready Services component in Oracle Database 10.1.0.5 allows remote attackers to affect availability via unknown vectors...

CVE-2009-0973

CVE-2009-0973 affects Oracle Database 10.1.0.5 specifically the Cluster Ready Services component. The available data characterizes it as an unspecified vulnerability that could allow remote attackers to impact availability via unknown vectors. There are no exploitation details provided in the doc...

Mandriva Update for ntfs-3g MDVA-2008:096 (ntfs-3g)

Check for the Version of ntfs-3g OpenVAS Vulnerability Test Mandriva Update for ntfs-3g MDVA-2008:096 ntfs-3g Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mandriva Update for ntfs-3g MDVA-2008:096 (ntfs-3g)

Check for the Version of ntfs-3g OpenVAS Vulnerability Test Mandriva Update for ntfs-3g MDVA-2008:096 ntfs-3g Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Buffer overflow

Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux RHEL 5 allows attackers to cause a denial of service CPU consumption and memory corruption via a cluster.conf file with many lines. NOTE: it is not clear whether this issue crosses privilege...

CVE-2008-6560

CVE-2008-6560 affects CMAN (Cluster Manager) before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux 5. The issue is a buffer overflow in CMAN triggered by a cluster.conf file with many lines, leading to a denial of service via CPU consumption and memory corruption. The public records do not pr...

CVE-2008-6560

Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux RHEL 5 allows attackers to cause a denial of service CPU consumption and memory corruption via a cluster.conf file with many lines. NOTE: it is not clear whether this issue crosses privilege...

Design/Logic Flaw

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager aka rgmanager before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on...

CVE-2008-6552

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager aka rgmanager before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on...

CVE-2008-6552

CVE-2008-6552 affects Red Hat Cluster Suite components (Resource Group Manager rgmanager, gfs2-utils, and CMAN) on Fedora 9 and related packages. The vulnerability arises from symlink attacks in /tmp that allow local attackers to modify or overwrite arbitrary files, with impact on confidentiality...