Lucene search
Ubuntu.comUB:CVE-2008-4579HistoryOct 15, 2008 - 12:00 a.m.
CVE-2008-4579
2008-10-1500:00:00
ubuntu.com
ubuntu.com
7
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
9.3%
The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence
2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows
local users to append to arbitrary files via a symlink attack on the apclog
temporary file.
Bugs
Notes
| Author | Note |
|---|---|
| jdstrand | Ubuntu 8.10 and 9.04 already includes the upstream patches |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 8.04 | noarch | redhat-cluster | < 2.20080227-0ubuntu1.3 | UNKNOWN |
| ubuntu | 6.06 | noarch | redhat-cluster-suite | < 1.20060222-0ubuntu6.3 | UNKNOWN |
Related
cve
cve
CVE-2008-4579
2008-10-15 20:08:00
veracode
veracode
Symlink Attack
2020-04-10 00:36:10
prion
prion
Code injection
2008-10-15 20:08:00
fedora
fedora
[SECURITY] Fedora 9 Update: rgmanager-2.03.09-1.fc9
2008-11-07 02:55:52
[SECURITY] Fedora 9 Update: gfs2-utils-2.03.08-1.fc9
2008-10-23 16:36:13
[SECURITY] Fedora 9 Update: rgmanager-2.03.08-1.fc9
2008-10-23 16:36:13
openvas
openvas
CentOS Update for cman CESA-2009:1341 centos5 i386
2011-08-09 00:00:00
Fedora Update for gfs2-utils FEDORA-2008-9458
2009-02-17 00:00:00
Fedora Update for rgmanager FEDORA-2008-9458
2009-02-17 00:00:00
nessus
nessus
Oracle Linux 5 : cman (ELSA-2009-1341)
2023-09-07 00:00:00
Scientific Linux Security Update : cman on SL5.x i386/x86_64
2012-08-01 00:00:00
CentOS 5 : cman (CESA-2009:1341)
2010-01-06 00:00:00
gentoo
gentoo
fence: Multiple symlink vulnerabilities
2010-09-29 00:00:00
oraclelinux
oraclelinux
cman security, bug fix, and enhancement update
2009-09-08 00:00:00
redhat
redhat
(RHSA-2011:0266) Low: fence security, bug fix, and enhancement update
2011-02-16 00:00:00
(RHSA-2009:1341) Low: cman security, bug fix, and enhancement update
2009-09-02 09:47:12
centos
centos
cman security update
2009-09-15 18:50:02
ubuntu
ubuntu
Red Hat Cluster Suite vulnerabilities
2009-12-18 00:00:00
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
9.3%
Related for UB:CVE-2008-4579