Red Hat Security AdvisoryRHSA-2011:0264
rgmanager security and bug fix update
Released 2011-02-16 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Cluster Suite 4AS rgmanager-1.9.88-2.el4, rgmanager-1.9.88-2.el4.i386, rgmanager-1.9.88-2.el4.ia64
- Red Hat Cluster Suite 4ES rgmanager-1.9.88-2.el4, rgmanager-1.9.88-2.el4.i386, rgmanager-1.9.88-2.el4.ia64
- Red Hat Cluster Suite 4WS rgmanager-1.9.88-2.el4, rgmanager-1.9.88-2.el4.i386, rgmanager-1.9.88-2.el4.ia64
Fixes 2 records
Priority LOW 31
The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or cluster-agents) 1.0.3 in Linux-HA place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00417 · Published 2010-10-20 · Partial fix
Priority LOW 31
Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00379 · Published 2009-03-30 · Fixed CWE-59
