Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-6552
HistoryMar 30, 2009 - 4:30 p.m.

CVE-2008-6552

2009-03-3016:30:00
CWE-59
[email protected]
web.nvd.nist.gov

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.1%

JSON

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.

Affected configurations

NVD
Node
redhatcluster_projectMatch2.00.00
OR
redhatcluster_projectMatch2.01.00
OR
redhatcluster_projectMatch2.02.00
OR
redhatcluster_projectMatch2.03.00
OR
redhatcluster_projectMatch2.03.01
OR
redhatcluster_projectMatch2.03.03
OR
redhatcluster_projectMatch2.03.04
OR
redhatcluster_projectMatch2.03.05
OR
redhatcluster_projectMatch2.03.7
OR
redhatcluster_projectMatch2.03.08
OR
redhatcluster_projectMatch2.03.09
OR
redhatcluster_projectMatch2.03.10
OR
redhatcluster_projectMatch2.03.11
OR
redhatcluster_projectMatch2.99.00
OR
redhatcluster_projectMatch2.99.01
OR
redhatcluster_projectMatch2.99.02
OR
redhatcluster_projectMatch2.99.03
OR
redhatcluster_projectMatch2.99.04
OR
redhatcluster_projectMatch2.99.05
OR
redhatcluster_projectMatch2.99.06
OR
redhatcluster_projectMatch2.99.07
OR
redhatcluster_projectMatch2.99.08
OR
redhatcluster_projectMatch2.99.09
OR
redhatcluster_projectMatch2.99.10
OR
redhatcluster_projectMatch2.99.11
OR
redhatcluster_projectMatch2.99.12
OR
redhatcluster_projectMatch2.99.13
Node
redhatcmanMatch2.03.03-1
OR
redhatcmanMatch2.03.04-1
OR
redhatcmanMatch2.03.05-1
OR
redhatcmanMatch2.03.07-1
OR
redhatcmanMatch2.03.08-1
OR
redhatrgmanagerMatch2.03.03-1
OR
redhatrgmanagerMatch2.03.04-1
OR
redhatrgmanagerMatch2.03.05-1
OR
redhatrgmanagerMatch2.03.07-1
OR
redhatrgmanagerMatch2.03.08-1
OR
fedoraprojectfedoraMatch9
AND
redhatgfs2-utilsMatch2.03.03-1
OR
redhatgfs2-utilsMatch2.03.04-1
OR
redhatgfs2-utilsMatch2.03.05-1
OR
redhatgfs2-utilsMatch2.03.07-1
OR
redhatgfs2-utilsMatch22.03.08-1

References

Related

redhat 5
openvas 23
centos 3
nessus 16
oraclelinux 3
ubuntucve 1
prion 1
veracode 1
cvelist 1
cve 1
ubuntu 1
redhat
redhat
(RHSA-2009:1339) Low: rgmanager security, bug fix, and enhancement update
2009-09-02 09:47:41
(RHSA-2011:0265) Low: ccs security update
2011-02-16 00:00:00
(RHSA-2009:1337) Low: gfs2-utils security and bug fix update
2009-09-02 03:02:33
openvas
openvas
RedHat Security Advisory RHSA-2009:1337
2009-09-09 00:00:00
Oracle: Security Advisory (ELSA-2009-1339)
2015-10-08 00:00:00
Oracle: Security Advisory (ELSA-2009-1337)
2015-10-08 00:00:00
centos
centos
rgmanager security update
2009-09-15 18:44:02
gfs2 security update
2009-09-15 18:43:21
cman security update
2009-09-15 18:50:02
nessus
nessus
Scientific Linux Security Update : rgmanager on SL5.x i386/x86_64
2012-08-01 00:00:00
RHEL 5 : rgmanager (RHSA-2009:1339)
2013-01-24 00:00:00
Scientific Linux Security Update : gfs2-utils on SL5.x i386/x86_64
2012-08-01 00:00:00
oraclelinux
oraclelinux
rgmanager security, bug fix, and enhancement update
2009-09-08 00:00:00
gfs2-utils security and bug fix update
2009-09-08 00:00:00
cman security, bug fix, and enhancement update
2009-09-08 00:00:00
ubuntucve
ubuntucve
CVE-2008-6552
2009-03-30 00:00:00
prion
prion
Design/Logic Flaw
2009-03-30 16:30:00
veracode
veracode
Arbitrary File Overwrite
2020-04-10 00:36:10
cvelist
cvelist
CVE-2008-6552
2009-03-30 16:00:00
cve
cve
CVE-2008-6552
2009-03-30 16:30:00
ubuntu
ubuntu
Red Hat Cluster Suite vulnerabilities
2009-12-18 00:00:00

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.1%

JSON
Related for NVD:CVE-2008-6552
redhat5openvas23centos3nessus16oraclelinux3ubuntucve1prion1veracode1cvelist1cve1ubuntu1