CVE-2008-6552

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager aka rgmanager before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on...

CVE-2008-6552

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager aka rgmanager before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on...

Ubuntu: Security Advisory (USN-476-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for cman FEDORA-2008-9042

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for cman FEDORA-2008-9458

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for cman FEDORA-2008-9458

Check for the Version of cman OpenVAS Vulnerability Test Fedora Update for cman FEDORA-2008-9458 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for cman FEDORA-2008-9042

Check for the Version of cman OpenVAS Vulnerability Test Fedora Update for cman FEDORA-2008-9042 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 9 Update: cman-2.03.09-1.fc9

CMAN - The Cluster Manager...

Fedora 9 : cman-2.03.09-1.fc9 / gfs2-utils-2.03.09-1.fc9 / rgmanager-2.03.09-1.fc9 (2008-9458)

A major code audit did show several unsecure use of /tmp. This update addresses those issues across the whole code. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...

Fedora 9 : cman-2.03.08-1.fc9 / gfs2-utils-2.03.08-1.fc9 / rgmanager-2.03.08-1.fc9 (2008-9042)

This update includes security fixes for: CVE-2008-4192 CVE-2008-4579 among many other upstream bug fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

[SECURITY] Fedora 9 Update: cman-2.03.08-1.fc9

CMAN - The Cluster Manager...

CVE-2008-4580

CVE-2008-4580 affects fence_manual as used in fence 2.02.00-r1 (and possibly cman). The vulnerability arises from a symlink attack on the fence_manual.fifo temporary file, enabling local attackers to modify arbitrary files and potentially overwrite them with root privileges. The connected OpenVAS...

CVE-2008-4192

The pservershutdown function in fenceegenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file...

Design/Logic Flaw

The pservershutdown function in fenceegenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file...

CVE-2008-4192

CVE-2008-4192 affects CMAN fence_egenera (cman 2.20080629/2.20080801); local attacker can overwrite arbitrary files via a symlink attack on /tmp/eglog. Connected advisories reference Red Hat/CentOS fence updates (RHSA-2011:0266, RHBA-2010:0266) and Ubuntu USN-875-1 confirming insecure temporary f...

CVE-2008-4192

The pservershutdown function in fenceegenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file...

Ubuntu 7.04 : redhat-cluster-suite vulnerability (USN-476-1)

Fabio Massimo Di Nitto discovered that cman did not correctly validate the size of client messages. A local user could send a specially crafted message and execute arbitrary code with cluster manager privileges or crash the manager, leading to a denial of service. Note that Tenable Network Securi...

cman security update

CentOS Errata and Security Advisory CESA-2007:0559 Updated cman packages that correct a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. cman is the Red Hat Cluster Manager. A fla...

RHEL 5 : cman (RHSA-2007:0559)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:0559 advisory. cman is the Red Hat Cluster Manager. A flaw was found in the cman daemon. A local attacker could connect to the cman daemon and trigger a static buff...

possible buffer overflow could cause local DoS by crashing cman

Buffer overflow in cluster/cman/daemon/daemon.c in cman redhat-cluster-suite before 20070622 allows local users to cause a denial of service crash and possibly execute arbitrary code via long client messages...