Lucene search
Ubuntu.comUB:CVE-2008-4580HistoryOct 15, 2008 - 12:00 a.m.
CVE-2008-4580
2008-10-1500:00:00
ubuntu.com
ubuntu.com
9
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%
fence_manual, as used in fence 2.02.00-r1 and possibly cman, allows local
users to modify arbitrary files via a symlink attack on the
fence_manual.fifo temporary file.
Bugs
Notes
| Author | Note |
|---|---|
| jdstrand | code not present in 7.10, 8.04 LTS and 8.10 |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 6.06 | noarch | redhat-cluster-suite | < 1.20060222-0ubuntu6.3 | UNKNOWN |
Related
prion
prion
Design/Logic Flaw
2008-10-15 20:08:00
cve
cve
CVE-2008-4580
2008-10-15 20:08:00
nessus
nessus
openvas
openvas
Gentoo Security Advisory GLSA 201009-09 (fence)
2011-03-09 00:00:00
Gentoo Security Advisory GLSA 201009-09 (fence)
2011-03-09 00:00:00
Ubuntu: Security Advisory (USN-875-1)
2009-12-30 00:00:00
gentoo
gentoo
fence: Multiple symlink vulnerabilities
2010-09-29 00:00:00
ubuntu
ubuntu
Red Hat Cluster Suite vulnerabilities
2009-12-18 00:00:00
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%
Related for UB:CVE-2008-4580