NetSight
medium6.9

CVE-2008-6552

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in…

Impact

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.

Affected products

VendorProductAffected versions
RedhatCluster Project
Versions 2.00.00, 2.01.00, 2.02.00, 2.03.00, 2.03.01, 2.03.03
RedhatCman
Versions 2.03.03-1, 2.03.04-1, 2.03.05-1, 2.03.07-1, 2.03.08-1
RedhatRgmanager
Versions 2.03.03-1, 2.03.04-1, 2.03.05-1, 2.03.07-1, 2.03.08-1
FedoraprojectFedora
Version 9
RedhatGfs2-Utils
Versions 2.03.03-1, 2.03.04-1, 2.03.05-1, 2.03.07-1, 22.03.08-1

Weakness classification

References