UbuntuUSN-875-1Red Hat Cluster Suite vulnerabilities
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
Confidence
Low
EPSS
Percentile
83.1%
Releases
- Ubuntu 8.10
- Ubuntu 8.04
- Ubuntu 6.06
Packages
- redhat-cluster -
- redhat-cluster-suite -
Details
Multiple insecure temporary file handling vulnerabilities were discovered
in Red Hat Cluster. A local attacker could exploit these to overwrite
arbitrary local files via symlinks. (CVE-2008-4192, CVE-2008-4579,
CVE-2008-4580, CVE-2008-6552)
It was discovered that CMAN did not properly handle malformed configuration
files. An attacker could cause a denial of service (via CPU consumption and
memory corruption) in a node if the attacker were able to modify the
cluster configuration for the node. (CVE-2008-6560)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 8.10 | noarch | gfs2-tools | < 2.20080826-0ubuntu1.3 | UNKNOWN |
| Ubuntu | 8.10 | noarch | cman | < 2.20080826-0ubuntu1.3 | UNKNOWN |
| Ubuntu | 8.10 | noarch | gfs-tools | < 2.20080826-0ubuntu1.3 | UNKNOWN |
| Ubuntu | 8.10 | noarch | gnbd-client | < 2.20080826-0ubuntu1.3 | UNKNOWN |
| Ubuntu | 8.10 | noarch | gnbd-server | < 2.20080826-0ubuntu1.3 | UNKNOWN |
| Ubuntu | 8.10 | noarch | libccs-dev | < 2.20080826-0ubuntu1.3 | UNKNOWN |
| Ubuntu | 8.10 | noarch | libccs-perl | < 2.20080826-0ubuntu1.3 | UNKNOWN |
| Ubuntu | 8.10 | noarch | libccs3 | < 2.20080826-0ubuntu1.3 | UNKNOWN |
| Ubuntu | 8.10 | noarch | libcman-dev | < 2.20080826-0ubuntu1.3 | UNKNOWN |
| Ubuntu | 8.10 | noarch | libcman3 | < 2.20080826-0ubuntu1.3 | UNKNOWN |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
Confidence
Low
EPSS
Percentile
83.1%