Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-6560
HistoryMar 31, 2009 - 12:00 a.m.

CVE-2008-6560

2009-03-3100:00:00
ubuntu.com
ubuntu.com
7

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.009 Low

EPSS

Percentile

82.2%

Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9
and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of
service (CPU consumption and memory corruption) via a cluster.conf file
with many lines. NOTE: it is not clear whether this issue crosses
privilege boundaries in realistic uses of the product.

Bugs

Notes

Author Note
jdstrand DoS, but requires access to cluster.conf, which is typically root owned
OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchredhat-cluster< 2.20080227-0ubuntu1.3UNKNOWN
ubuntu8.10noarchredhat-cluster< 2.20080826-0ubuntu1.3UNKNOWN

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.009 Low

EPSS

Percentile

82.2%

Related for UB:CVE-2008-6560