CVE Database
/

CVE-2008-4579

Back to search

CVE-2008-4579

Published: Oct 15, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file.

VendorProductVersions

n/a

n/a

affected
n/a

References

RHSA-2009:1341
vendor-advisory
x_refsource_REDHAT
32390
third-party-advisory
x_refsource_SECUNIA
32387
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:10799
vdb-entry
signature
x_refsource_OVAL
ADV-2011-0419
vdb-entry
x_refsource_VUPEN
USN-875-1
vendor-advisory
x_refsource_UBUNTU
31904
vdb-entry
x_refsource_BID
[oss-security] 20081013 Re: CVE Request
mailing-list
x_refsource_MLIST
36530
third-party-advisory
x_refsource_SECUNIA
FEDORA-2008-9042
vendor-advisory
x_refsource_FEDORA
43362
third-party-advisory
x_refsource_SECUNIA
RHSA-2011:0266
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now