Red Hat Security AdvisoryRHSA-2011:0266
fence security, bug fix, and enhancement update
Released 2011-02-16 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Cluster Suite 4AS fence-1.32.68-5.el4, fence-1.32.68-5.el4.ia64
- Red Hat Cluster Suite 4ES fence-1.32.68-5.el4, fence-1.32.68-5.el4.ia64
- Red Hat Cluster Suite 4WS fence-1.32.68-5.el4, fence-1.32.68-5.el4.ia64
Fixes 2 records
Priority LOW 32
The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00711 · Published 2008-09-29 · Fixed CWE-59
Priority LOW 10
The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog t…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.00352 · Published 2008-10-15 · Fixed CWE-59
