CVE-2008-6560

Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines.  NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
VendorProductVersion
redhatcman
𝑥
≤ 2.03.08-1
redhatcman
2.03.03-1
redhatcman
2.03.04-1
redhatcman
2.03.05-1
redhatcman
2.03.07-1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
redhat-cluster
karmic
not-affected
jaunty
not-affected
intrepid
Fixed 2.20080826-0ubuntu1.3
released
hardy
Fixed 2.20080227-0ubuntu1.3
released
gutsy
dne
dapper
dne
redhat-cluster-suite
karmic
dne
jaunty
dne
intrepid
dne
hardy
dne
gutsy
ignored
dapper
not-affected