oss-sec mailing list archives
Re: CVE Request
From: "Steven M. Christey" <coley () linus mitre org>
Date: Wed, 15 Oct 2008 15:07:40 -0400 (EDT)
For the fence issues. Which packages does the fence_manual issue affect? ====================================================== Name: CVE-2008-4579 Status: Candidate URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4579 Reference: MISC:http://bugs.gentoo.org/show_bug.cgi?id=240576 Reference: MLIST:[oss-security] 20081013 Re: CVE Request Reference: URL:http://www.openwall.com/lists/oss-security/2008/10/13/3 The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file. ====================================================== Name: CVE-2008-4580 Status: Candidate URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4580 Reference: MLIST:[oss-security] 20081013 Re: CVE Request Reference: URL:http://www.openwall.com/lists/oss-security/2008/10/13/3 fence_manual in fence allows local users to modify arbitrary files via a symlink attack on the fence_manual.fifo temporary file.
Current thread:
- CVE Request Josh Bressers (Oct 10)
- Re: CVE Request Tomas Hoger (Oct 13)
- Re: CVE Request Steven M. Christey (Oct 15)
- Re: CVE Request Tomas Hoger (Oct 16)
- Re: CVE Request Steven M. Christey (Oct 15)
- Re: CVE Request Steven M. Christey (Oct 15)
- Re: CVE Request Tomas Hoger (Oct 13)