Scientific Linux Security Update : fence on SL4.x i386/x86_64

Insecure temporary file use flaws were found in fenceegenera, fenceapc, and fenceapcsnmp. A local attacker could use these flaws to overwrite an arbitrary file writable by the victim running those utilities via a symbolic link attack. CVE-2008-4192, CVE-2008-4579 This update also fixes the...

CVE-2008-4192

CVE-2008-4192 affects CMAN fence_egenera (cman 2.20080629/2.20080801); local attacker can overwrite arbitrary files via a symlink attack on /tmp/eglog. Connected advisories reference Red Hat/CentOS fence updates (RHSA-2011:0266, RHBA-2010:0266) and Ubuntu USN-875-1 confirming insecure temporary f...

CVE-2008-4192

The pservershutdown function in fenceegenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file...