redhat cman vulnerabilities and exploits

(subscribe to this query)

695

VMScore

The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.

Redhat Cman 2.20080629 Redhat Cman 2.20080801

1 EDB exploit

694

VMScore

Buffer overflow in CMAN - The Cluster Manager prior to 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows malicious users to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines. NOTE: it is not clear whether th...

Redhat Cman Redhat Cman 2.03.03-1 Redhat Cman 2.03.04-1 Redhat Cman 2.03.05-1 Redhat Cman 2.03.07-1

641

VMScore

fence_manual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify arbitrary files via a symlink attack on the fence_manual.fifo temporary file.

Gentoo Cman 2.02.00 Gentoo Fence 2.02.00

614

VMScore

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) prior to 2.03.09-1, gfs2-utils prior to 2.03.09-1, and CMAN - The Cluster Manager...

445

VMScore

daemon.c in cman (redhat-cluster-suite) prior to 20070622 does not clear a buffer for reading requests, which might allow local users to obtain sensitive information from previous requests.

Redhat Cluster Suite

409

VMScore

Buffer overflow in cluster/cman/daemon/daemon.c in cman (redhat-cluster-suite) prior to 20070622 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via long client messages.

Redhat Cluster Suite

169

VMScore

The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file.

Gentoo Cman 2.02.00 Gentoo Fence 2.02.00

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook