CVE-2008-4579

The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
1.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:N/I:P/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
VendorProductVersion
gentoocman
2.02.00:r1
gentoofence
2.02.00:r1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
redhat-cluster
karmic
not-affected
jaunty
not-affected
intrepid
not-affected
hardy
Fixed 2.20080227-0ubuntu1.3
released
gutsy
dne
feisty
dne
dapper
dne
redhat-cluster-suite
karmic
dne
jaunty
dne
intrepid
dne
hardy
dne
gutsy
ignored
feisty
ignored
dapper
Fixed 1.20060222-0ubuntu6.3
released