CVE-2008-6552 Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) b...
MediumCVSS 6.9
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat cluster project | = 2.00.00 | No fix listed |
| redhat cluster project | = 2.01.00 | No fix listed |
| redhat cluster project | = 2.02.00 | No fix listed |
| redhat cluster project | = 2.03.00 | No fix listed |
| redhat cluster project | = 2.03.01 | No fix listed |
| redhat cluster project | = 2.03.03 | No fix listed |
| redhat cluster project | = 2.03.04 | No fix listed |
| redhat cluster project | = 2.03.05 | No fix listed |
| redhat cluster project | = 2.03.7 | No fix listed |
| redhat cluster project | = 2.03.08 | No fix listed |
| redhat cluster project | = 2.03.09 | No fix listed |
| redhat cluster project | = 2.03.10 | No fix listed |
| redhat cluster project | = 2.03.11 | No fix listed |
| redhat cluster project | = 2.99.00 | No fix listed |
| redhat cluster project | = 2.99.01 | No fix listed |
| redhat cluster project | = 2.99.02 | No fix listed |
| redhat cluster project | = 2.99.03 | No fix listed |
| redhat cluster project | = 2.99.04 | No fix listed |
| redhat cluster project | = 2.99.05 | No fix listed |
| redhat cluster project | = 2.99.06 | No fix listed |
| redhat cluster project | = 2.99.07 | No fix listed |
| redhat cluster project | = 2.99.08 | No fix listed |
| redhat cluster project | = 2.99.09 | No fix listed |
| redhat cluster project | = 2.99.10 | No fix listed |
| redhat cluster project | = 2.99.11 | No fix listed |
Show 18 more
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat cluster project | = 2.99.12 | No fix listed |
| redhat cluster project | = 2.99.13 | No fix listed |
| redhat cman | = 2.03.03-1 | No fix listed |
| redhat cman | = 2.03.04-1 | No fix listed |
| redhat cman | = 2.03.05-1 | No fix listed |
| redhat cman | = 2.03.07-1 | No fix listed |
| redhat cman | = 2.03.08-1 | No fix listed |
| redhat rgmanager | = 2.03.03-1 | No fix listed |
| redhat rgmanager | = 2.03.04-1 | No fix listed |
| redhat rgmanager | = 2.03.05-1 | No fix listed |
| redhat rgmanager | = 2.03.07-1 | No fix listed |
| redhat rgmanager | = 2.03.08-1 | No fix listed |
| fedoraproject fedora | = 9 | No fix listed |
| redhat gfs2-utils | = 2.03.03-1 | No fix listed |
| redhat gfs2-utils | = 2.03.04-1 | No fix listed |
| redhat gfs2-utils | = 2.03.05-1 | No fix listed |
| redhat gfs2-utils | = 2.03.07-1 | No fix listed |
| redhat gfs2-utils | = 22.03.08-1 | No fix listed |
References
- 50299 vdb-entry
- 50300 vdb-entry
- 50301 vdb-entry
- RHSA-2009:1337 vendor-advisory
- 32602 third-party-advisory vendor-advisory
- 32616 third-party-advisory
- 36530 third-party-advisory
- 36555 third-party-advisory
- 43367 third-party-advisory
- 43372 third-party-advisory
- FEDORA-2008-9458 vendor-advisory
- FEDORA-2008-9458 vendor-advisory
- FEDORA-2008-9458 vendor-advisory
- RHSA-2009:1339 vendor-advisory
- RHSA-2009:1341 vendor-advisory
- RHSA-2011:0264 vendor-advisory
- RHSA-2011:0265 vendor-advisory
- 32179 vdb-entry
- USN-875-1 vendor-advisory
- ADV-2011-0416 vdb-entry
- ADV-2011-0417 vdb-entry
- clusterproject-unspecified-priv-escalation(46412) vdb-entry
- oval:org.mitre.oval:def:11404 signature vdb-entry