CVE-2008-4579

CVE-2008-4579 is tied to the fence components (fence_apc and fence_apc_snmp) used by fence 2.02.00-r1 and possibly cman. The vulnerability arises from insecure temporary file handling in verbose mode, enabling a local attacker to perform a symlink attack against the apclog file and append data to...

CVE-2008-4580

CVE-2008-4580 affects fence_manual as used in fence 2.02.00-r1 (and possibly cman). The vulnerability arises from a symlink attack on the fence_manual.fifo temporary file, enabling local attackers to modify arbitrary files and potentially overwrite them with root privileges. The connected OpenVAS...