Arbitrary File Overwrite

fence is vulnerable to arbitrary file overwrite. The pservershutdown function in fenceegenera allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file...

CVE-2008-4579

The 1 fenceapc and 2 fenceapcsnmp programs, as used in a fence 2.02.00-r1 and possibly b cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file...

PT-2008-5797 · Fence +1 · Fence +1

Name of the Vulnerable Software and Affected Versions: fence versions 2.02.00-r1 Description: The issue allows local users to append to arbitrary files via a symlink attack on the apclog temporary file when the fence apc and fence apc snmp programs are running in verbose mode. Recommendations: Fo...