Read the docs
TI-2008-06242 Aliases CVE-2008-6552GHSA-mmp4-x7mg-mw3w

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via…

Priority LOW 31CWE-59Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.

Why it matters now

EPSS 0.00379 32nd percentileScored 2026-11-07
Fix Fixed Red Hat: 5 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 43

CPEVersionsRoleVendor
cpe:2.3:a:redhat:cluster_project:2.00.00:*:*:*:*:*:*:*2.00.00VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.01.00:*:*:*:*:*:*:*2.01.00VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.02.00:*:*:*:*:*:*:*2.02.00VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.03.00:*:*:*:*:*:*:*2.03.00VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.03.01:*:*:*:*:*:*:*2.03.01VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.03.03:*:*:*:*:*:*:*2.03.03VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.03.04:*:*:*:*:*:*:*2.03.04VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.03.05:*:*:*:*:*:*:*2.03.05VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.03.7:*:*:*:*:*:*:*2.03.7VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.03.08:*:*:*:*:*:*:*2.03.08VulnerableRed Hat
  • cpe:2.3:a:redhat:cluster_project:2.00.00:*:*:*:*:*:*:* Versions 2.00.00 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.01.00:*:*:*:*:*:*:* Versions 2.01.00 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.02.00:*:*:*:*:*:*:* Versions 2.02.00 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.03.00:*:*:*:*:*:*:* Versions 2.03.00 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.03.01:*:*:*:*:*:*:* Versions 2.03.01 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.03.03:*:*:*:*:*:*:* Versions 2.03.03 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.03.04:*:*:*:*:*:*:* Versions 2.03.04 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.03.05:*:*:*:*:*:*:* Versions 2.03.05 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.03.7:*:*:*:*:*:*:* Versions 2.03.7 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.03.08:*:*:*:*:*:*:* Versions 2.03.08 Vulnerable ·Red Hat
Show 33 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:redhat:cluster_project:2.03.09:*:*:*:*:*:*:*2.03.09VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.03.10:*:*:*:*:*:*:*2.03.10VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.03.11:*:*:*:*:*:*:*2.03.11VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.99.00:*:*:*:*:*:*:*2.99.00VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.99.01:*:*:*:*:*:*:*2.99.01VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.99.02:*:*:*:*:*:*:*2.99.02VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.99.03:*:*:*:*:*:*:*2.99.03VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.99.04:*:*:*:*:*:*:*2.99.04VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.99.05:*:*:*:*:*:*:*2.99.05VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.99.06:*:*:*:*:*:*:*2.99.06VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.99.07:*:*:*:*:*:*:*2.99.07VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.99.08:*:*:*:*:*:*:*2.99.08VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.99.09:*:*:*:*:*:*:*2.99.09VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.99.10:*:*:*:*:*:*:*2.99.10VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.99.11:*:*:*:*:*:*:*2.99.11VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.99.12:*:*:*:*:*:*:*2.99.12VulnerableRed Hat
cpe:2.3:a:redhat:cluster_project:2.99.13:*:*:*:*:*:*:*2.99.13VulnerableRed Hat
cpe:2.3:a:redhat:cman:2.03.03-1:*:*:*:*:*:*:*2.03.03-1VulnerableRed Hat
cpe:2.3:a:redhat:cman:2.03.04-1:*:*:*:*:*:*:*2.03.04-1VulnerableRed Hat
cpe:2.3:a:redhat:cman:2.03.05-1:*:*:*:*:*:*:*2.03.05-1VulnerableRed Hat
cpe:2.3:a:redhat:cman:2.03.07-1:*:*:*:*:*:*:*2.03.07-1VulnerableRed Hat
cpe:2.3:a:redhat:cman:2.03.08-1:*:*:*:*:*:*:*2.03.08-1VulnerableRed Hat
cpe:2.3:a:redhat:rgmanager:2.03.03-1:*:*:*:*:*:*:*2.03.03-1VulnerableRed Hat
cpe:2.3:a:redhat:rgmanager:2.03.04-1:*:*:*:*:*:*:*2.03.04-1VulnerableRed Hat
cpe:2.3:a:redhat:rgmanager:2.03.05-1:*:*:*:*:*:*:*2.03.05-1VulnerableRed Hat
cpe:2.3:a:redhat:rgmanager:2.03.07-1:*:*:*:*:*:*:*2.03.07-1VulnerableRed Hat
cpe:2.3:a:redhat:rgmanager:2.03.08-1:*:*:*:*:*:*:*2.03.08-1VulnerableRed Hat
cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*9VulnerableFedoraproject
cpe:2.3:a:redhat:gfs2-utils:2.03.03-1:*:*:*:*:*:*:*2.03.03-1VulnerableRed Hat
cpe:2.3:a:redhat:gfs2-utils:2.03.04-1:*:*:*:*:*:*:*2.03.04-1VulnerableRed Hat
cpe:2.3:a:redhat:gfs2-utils:2.03.05-1:*:*:*:*:*:*:*2.03.05-1VulnerableRed Hat
cpe:2.3:a:redhat:gfs2-utils:2.03.07-1:*:*:*:*:*:*:*2.03.07-1VulnerableRed Hat
cpe:2.3:a:redhat:gfs2-utils:22.03.08-1:*:*:*:*:*:*:*22.03.08-1VulnerableRed Hat
  • cpe:2.3:a:redhat:cluster_project:2.03.09:*:*:*:*:*:*:* Versions 2.03.09 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.03.10:*:*:*:*:*:*:* Versions 2.03.10 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.03.11:*:*:*:*:*:*:* Versions 2.03.11 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.99.00:*:*:*:*:*:*:* Versions 2.99.00 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.99.01:*:*:*:*:*:*:* Versions 2.99.01 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.99.02:*:*:*:*:*:*:* Versions 2.99.02 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.99.03:*:*:*:*:*:*:* Versions 2.99.03 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.99.04:*:*:*:*:*:*:* Versions 2.99.04 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.99.05:*:*:*:*:*:*:* Versions 2.99.05 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.99.06:*:*:*:*:*:*:* Versions 2.99.06 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.99.07:*:*:*:*:*:*:* Versions 2.99.07 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.99.08:*:*:*:*:*:*:* Versions 2.99.08 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.99.09:*:*:*:*:*:*:* Versions 2.99.09 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.99.10:*:*:*:*:*:*:* Versions 2.99.10 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.99.11:*:*:*:*:*:*:* Versions 2.99.11 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.99.12:*:*:*:*:*:*:* Versions 2.99.12 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cluster_project:2.99.13:*:*:*:*:*:*:* Versions 2.99.13 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cman:2.03.03-1:*:*:*:*:*:*:* Versions 2.03.03-1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cman:2.03.04-1:*:*:*:*:*:*:* Versions 2.03.04-1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cman:2.03.05-1:*:*:*:*:*:*:* Versions 2.03.05-1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cman:2.03.07-1:*:*:*:*:*:*:* Versions 2.03.07-1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cman:2.03.08-1:*:*:*:*:*:*:* Versions 2.03.08-1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:rgmanager:2.03.03-1:*:*:*:*:*:*:* Versions 2.03.03-1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:rgmanager:2.03.04-1:*:*:*:*:*:*:* Versions 2.03.04-1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:rgmanager:2.03.05-1:*:*:*:*:*:*:* Versions 2.03.05-1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:rgmanager:2.03.07-1:*:*:*:*:*:*:* Versions 2.03.07-1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:rgmanager:2.03.08-1:*:*:*:*:*:*:* Versions 2.03.08-1 Vulnerable ·Red Hat
  • cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:* Versions 9 Vulnerable ·Fedoraproject
  • cpe:2.3:a:redhat:gfs2-utils:2.03.03-1:*:*:*:*:*:*:* Versions 2.03.03-1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:gfs2-utils:2.03.04-1:*:*:*:*:*:*:* Versions 2.03.04-1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:gfs2-utils:2.03.05-1:*:*:*:*:*:*:* Versions 2.03.05-1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:gfs2-utils:2.03.07-1:*:*:*:*:*:*:* Versions 2.03.07-1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:gfs2-utils:22.03.08-1:*:*:*:*:*:*:* Versions 22.03.08-1 Vulnerable ·Red Hat

Remediation

Red Hat 5 advisories

  • RHSA-2011:0265 Released 2011-02-16 · Red Hat rating Low
    ccs security update
    • Red Hat Cluster Suite 4AS ccs-1.0.13-2, ccs-1.0.13-2.ia64, ccs-devel-1.0.13-2 +1
    • Red Hat Cluster Suite 4ES ccs-1.0.13-2, ccs-1.0.13-2.ia64, ccs-devel-1.0.13-2 +1
    • Red Hat Cluster Suite 4WS ccs-1.0.13-2, ccs-1.0.13-2.ia64, ccs-devel-1.0.13-2 +1
  • RHSA-2011:0264 Released 2011-02-16 · Red Hat rating Low
    rgmanager security and bug fix update
    • Red Hat Cluster Suite 4AS rgmanager-1.9.88-2.el4, rgmanager-1.9.88-2.el4.i386, rgmanager-1.9.88-2.el4.ia64
    • Red Hat Cluster Suite 4ES rgmanager-1.9.88-2.el4, rgmanager-1.9.88-2.el4.i386, rgmanager-1.9.88-2.el4.ia64
    • Red Hat Cluster Suite 4WS rgmanager-1.9.88-2.el4, rgmanager-1.9.88-2.el4.i386, rgmanager-1.9.88-2.el4.ia64
  • RHSA-2009:1341 Released 2009-09-02 · Red Hat rating Low
    cman security, bug fix, and enhancement update
    • Red Hat Enterprise Linux (v. 5 server) cman-2.0.115-1.el5, cman-2.0.115-1.el5.i386, cman-2.0.115-1.el5.ia64 +5
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) cman-2.0.115-1.el5, cman-2.0.115-1.el5.i386, cman-devel-2.0.115-1.el5 +1
Show 2 more Red Hat advisories
  • RHSA-2009:1339 Released 2009-09-02 · Red Hat rating Low
    rgmanager security, bug fix, and enhancement update
    • Red Hat Enterprise Linux Clustering (v. 5 server) rgmanager-2.0.52-1.el5, rgmanager-2.0.52-1.el5.i386, rgmanager-2.0.52-1.el5.ia64 +1
  • RHSA-2009:1337 Released 2009-09-02 · Red Hat rating Low
    gfs2-utils security and bug fix update
    • Red Hat Enterprise Linux (v. 5 server) gfs2-utils-0.1.62-1.el5, gfs2-utils-0.1.62-1.el5.i386, gfs2-utils-0.1.62-1.el5.ia64 +1
    • Red Hat Enterprise Linux Desktop (v. 5 client) gfs2-utils-0.1.62-1.el5, gfs2-utils-0.1.62-1.el5.i386

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Cluster Suite 4ASFixed RHSA-2011:0264, RHSA-2011:0265
Red Hat Cluster Suite 4ESFixed RHSA-2011:0264, RHSA-2011:0265
Red Hat Cluster Suite 4WSFixed RHSA-2011:0264, RHSA-2011:0265
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2009:1337, RHSA-2009:1341
Red Hat Enterprise Linux Clustering (v. 5 server)Fixed RHSA-2009:1339
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2009:1337
Red Hat Enterprise Linux Desktop Workstation (v. 5 client)Fixed RHSA-2009:1341

Timeline

  1. 2026-10-02 Threatist record created from CVE-2008-6552
  2. 2026-10-03 Alias added: GHSA-mmp4-x7mg-mw3w

References

Advisory 9

Other 6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences