CVE-2008-6552

Published: Mar 30, 2009Modified: Apr 23, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.

Affected (43)

Products: Redhat: Cluster Project, Cman, Rgmanager, Gfs2 Utils · Fedoraproject: Fedora

4 products

Cluster Project

1 product

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Redhat Cluster Project	Version 2.00.00
Redhat Cluster Project	Version 2.01.00
Redhat Cluster Project	Version 2.02.00
Redhat Cluster Project	Version 2.03.00
Redhat Cluster Project	Version 2.03.01
Redhat Cluster Project	Version 2.03.03
Redhat Cluster Project	Version 2.03.04
Redhat Cluster Project	Version 2.03.05
Redhat Cluster Project	Version 2.03.08
Redhat Cluster Project	Version 2.03.09
Redhat Cluster Project	Version 2.03.10
Redhat Cluster Project	Version 2.03.11
Redhat Cluster Project	Version 2.03.7
Redhat Cluster Project	Version 2.99.00
Redhat Cluster Project	Version 2.99.01
Redhat Cluster Project	Version 2.99.02
Redhat Cluster Project	Version 2.99.03
Redhat Cluster Project	Version 2.99.04
Redhat Cluster Project	Version 2.99.05
Redhat Cluster Project	Version 2.99.06
Redhat Cluster Project	Version 2.99.07
Redhat Cluster Project	Version 2.99.08
Redhat Cluster Project	Version 2.99.09
Redhat Cluster Project	Version 2.99.10
Redhat Cluster Project	Version 2.99.11
Redhat Cluster Project	Version 2.99.12
Redhat Cluster Project	Version 2.99.13

Configuration B

16 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 9
Redhat Cman	Version 2.03.03-1
Redhat Cman	Version 2.03.04-1
Redhat Cman	Version 2.03.05-1
Redhat Cman	Version 2.03.07-1
Redhat Cman	Version 2.03.08-1
Redhat Rgmanager	Version 2.03.03-1
Redhat Rgmanager	Version 2.03.04-1
Redhat Rgmanager	Version 2.03.05-1
Redhat Rgmanager	Version 2.03.07-1
Redhat Rgmanager	Version 2.03.08-1
Redhat Gfs2 Utils	Version 2.03.03-1
Redhat Gfs2 Utils	Version 2.03.04-1
Redhat Gfs2 Utils	Version 2.03.05-1
Redhat Gfs2 Utils	Version 2.03.07-1
Redhat Gfs2 Utils	Version 22.03.08-1

Related CWEs

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (46)

http://osvdb.org/50299

Source: cve@mitre.org

http://osvdb.org/50300

Source: cve@mitre.org

http://osvdb.org/50301

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2009-1337.html

Source: cve@mitre.org

http://secunia.com/advisories/32602

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32616

Source: cve@mitre.org

http://secunia.com/advisories/36530

Source: cve@mitre.org

http://secunia.com/advisories/36555

Source: cve@mitre.org

http://secunia.com/advisories/43367

Source: cve@mitre.org

http://secunia.com/advisories/43372

Source: cve@mitre.org

http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html

Source: cve@mitre.org

Vendor Advisory

http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html

Source: cve@mitre.org

Vendor Advisory

http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html

Source: cve@mitre.org

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2009-1339.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-1341.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2011-0264.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2011-0265.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/32179

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-875-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2011/0416

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2011/0417

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/46412

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11404

Source: cve@mitre.org

http://osvdb.org/50299

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/50300

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/50301

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2009-1337.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32602

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/32616

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/36530

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/36555

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43367

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43372

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00163.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00164.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00165.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2009-1339.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2009-1341.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2011-0264.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2011-0265.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/32179

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-875-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0416

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0417

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/46412

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11404

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.