CVE-2008-6552

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 23%
VendorProductVersion
redhatcluster_project
2.00.00
redhatcluster_project
2.01.00
redhatcluster_project
2.02.00
redhatcluster_project
2.03.00
redhatcluster_project
2.03.01
redhatcluster_project
2.03.03
redhatcluster_project
2.03.04
redhatcluster_project
2.03.05
redhatcluster_project
2.03.7
redhatcluster_project
2.03.08
redhatcluster_project
2.03.09
redhatcluster_project
2.03.10
redhatcluster_project
2.03.11
redhatcluster_project
2.99.00
redhatcluster_project
2.99.01
redhatcluster_project
2.99.02
redhatcluster_project
2.99.03
redhatcluster_project
2.99.04
redhatcluster_project
2.99.05
redhatcluster_project
2.99.06
redhatcluster_project
2.99.07
redhatcluster_project
2.99.08
redhatcluster_project
2.99.09
redhatcluster_project
2.99.10
redhatcluster_project
2.99.11
redhatcluster_project
2.99.12
redhatcluster_project
2.99.13
redhatcman
2.03.03-1
redhatcman
2.03.04-1
redhatcman
2.03.05-1
redhatcman
2.03.07-1
redhatcman
2.03.08-1
redhatrgmanager
2.03.03-1
redhatrgmanager
2.03.04-1
redhatrgmanager
2.03.05-1
redhatrgmanager
2.03.07-1
redhatrgmanager
2.03.08-1
redhatgfs2-utils
2.03.03-1
redhatgfs2-utils
2.03.04-1
redhatgfs2-utils
2.03.05-1
redhatgfs2-utils
2.03.07-1
redhatgfs2-utils
22.03.08-1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
redhat-cluster
karmic
not-affected
jaunty
not-affected
intrepid
Fixed 2.20080826-0ubuntu1.3
released
hardy
Fixed 2.20080227-0ubuntu1.3
released
gutsy
dne
dapper
dne
redhat-cluster-suite
karmic
dne
jaunty
dne
intrepid
dne
hardy
dne
gutsy
ignored
dapper
Fixed 1.20060222-0ubuntu6.3
released
References