Описание
The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.
Релиз | Статус | Примечание |
---|---|---|
dapper | DNE | |
devel | not-affected | 2.20090112-0ubuntu4 |
feisty | DNE | |
gutsy | DNE | |
hardy | not-affected | |
intrepid | released | 2.20080826-0ubuntu1.3 |
jaunty | not-affected | 2.20090112-0ubuntu4 |
karmic | not-affected | 2.20090112-0ubuntu4 |
upstream | released | 2.20081102-1 |
Показывать по
Релиз | Статус | Примечание |
---|---|---|
dapper | not-affected | |
devel | DNE | |
feisty | not-affected | |
gutsy | not-affected | |
hardy | DNE | |
intrepid | DNE | |
jaunty | DNE | |
karmic | DNE | |
upstream | needs-triage |
Показывать по
EPSS
6.9 Medium
CVSS2
Связанные уязвимости
The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.
The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.
The pserver_shutdown function in fence_egenera in cman 2.20080629 and ...
The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.
EPSS
6.9 Medium
CVSS2