CVE-2008-6552

Red Hat Cluster Project 2.x - Arbitrary File Write via Symlink Attack in /tmp

Title source: llm
STIX 2.1

Description

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.

References (23)

Core 23
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32616
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0416
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2009-1341.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2011-0264.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/36555
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/32179
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0417
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32602
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43372
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-875-1
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11404
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/50300
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2009-1337.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2011-0265.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43367
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46412
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/36530
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/50301
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2009-1339.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/50299

Scores

EPSS 0.0039
EPSS Percentile 30.7%

Details

CWE
CWE-59
Status published
Products (43)
fedoraproject/fedora 9
redhat/cluster_project 2.00.00
redhat/cluster_project 2.01.00
redhat/cluster_project 2.02.00
redhat/cluster_project 2.03.00
redhat/cluster_project 2.03.01
redhat/cluster_project 2.03.03
redhat/cluster_project 2.03.04
redhat/cluster_project 2.03.05
redhat/cluster_project 2.03.7
... and 33 more
Published Mar 30, 2009
Tracked Since Feb 18, 2026