7.8
CVSSv2

CVE-2008-6560

Published: 31/03/2009 Updated: 07/11/2023
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

Buffer overflow in CMAN - The Cluster Manager prior to 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows malicious users to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines. NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product.

Vulnerable Product Search on Vulmon Subscribe to Product

redhat cman

redhat cman 2.03.03-1

redhat cman 2.03.04-1

redhat cman 2.03.05-1

redhat cman 2.03.07-1

Vendor Advisories

Multiple insecure temporary file handling vulnerabilities were discovered in Red Hat Cluster A local attacker could exploit these to overwrite arbitrary local files via symlinks (CVE-2008-4192, CVE-2008-4579, CVE-2008-4580, CVE-2008-6552) ...