NVD

Id
4048  
Name
CVE-2008-4192  
Description
The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-09-29  
Modified Date
2011-03-01  
Seq
2008-4192  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
25679 4048 CVE-2008-4192 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496410  View
25680 4048 CVE-2008-4192 http://dev.gentoo.org/~rbu/security/debiantemp/cman  View
25681 4048 CVE-2008-4192 http://uvw.ru/report.lenny.txt  View
25682 4048 CVE-2008-4192 [oss-security] 20080918 CVE Request (openswan, emacspeak, cman)  View
25683 4048 CVE-2008-4192 [oss-security] 20080923 Re: CVE Request (openswan, emacspeak, cman)  View
25684 4048 CVE-2008-4192 [oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire  View
25685 4048 CVE-2008-4192 RHSA-2011:0266  View
25686 4048 CVE-2008-4192 30898  View
25687 4048 CVE-2008-4192 USN-875-1  View
25688 4048 CVE-2008-4192 ADV-2011-0419  View
25689 4048 CVE-2008-4192 cman-fenceegenera-symlink(44845)  View
25690 4048 CVE-2008-4192 https://bugs.gentoo.org/show_bug.cgi?id=235770  View
25691 4048 CVE-2008-4192 https://bugzilla.redhat.com/show_bug.cgi?id=460476  View
25692 4048 CVE-2008-4192 FEDORA-2008-9042  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50933 JVNDB-2008-006243 cman の fence_egenera における任意のファイルを上書きされる脆弱性 cman の fence_egenera の pserver_shutdown 関数には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2008-4192 34305 CVE-2008-4192 4048 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006243.html 2008-09-29 2012-12-20 View