← Database

CVE-2008-4192

MEDIUM CVSS: 6.9 Published: 2008-09-29 Modified: 2026-06-16

Description

The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.

Affected Platforms

Redhat Cman

Weakness Type

CWE-59

References