CVE-2008-4192: redhat cman Link Following

CVSS: 6.9v2.0MediumModified

AliasesRHBA-2010:0266

Published 29-09-2008Last modified 07-08-2024

Vulnerability summary

CVE-2008-4192 is a medium (CVSS 6.9) Link Following vulnerability in redhat cman. EPSS estimates a 0.71% chance of exploitation in the next 30 days, higher than 52.6% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

38/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.9/10

010

Medium · v2.0 (NVD)

EPSS score

0.71%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 1

RHSA-2011:0266

Timeline

29-09-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.

CVSS metrics

1 score · 1 source · 1 version

v2.06.9

EPSS trend

Probability

0.71%

Chance of exploitation in the next 30 days

Percentile

53%

Versus all other CVEs

30-day change

0.00 pp

From 0.71% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.71%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databaseremotewindowsVerified
Adobe Flash Player - AVM Verification Logic Array Indexing Code Execution (Metasploit)
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-59Improper Link Resolution Before File Access ('Link Following')The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Affected systems

Redhat4 products

cman2.20080629 | 2.20080801
cman< 0:2.0.115-34.el5
cman-debuginfo< 0:2.0.115-34.el5
cman-devel< 0:2.0.115-34.el5

1 vendor · 4 products

References

69 links

www.securityfocus.com/bid/30898VDB EntryX Refsource BID
secunia.com/advisories/32390Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.openwall.com/lists/oss-security/2008/10/30/2Mailing ListX Refsource MLIST
dev.gentoo.org/~rbu/security/debiantemp/cmanX Refsource CONFIRM
secunia.com/advisories/32387Third Party AdvisoryX Refsource SECUNIAVendor Advisory
bugs.gentoo.org/show_bug.cgi?id=235770X Refsource CONFIRM
secunia.com/advisories/31887Third Party AdvisoryX Refsource SECUNIAVendor Advisory
uvw.ru/report.lenny.txtX Refsource MISC
exchange.xforce.ibmcloud.com/vulnerabilities/44845VDB EntryX Refsource XF
www.vupen.com/english/advisories/2011/0419VDB EntryX Refsource VUPENVendor Advisory

Show all 69 references

www.ubuntu.com/usn/USN-875-1Vendor AdvisoryX Refsource UBUNTU
bugzilla.redhat.com/show_bug.cgi?id=460476X Refsource CONFIRMREPORT
www.openwall.com/lists/oss-security/2008/09/18/3Mailing ListX Refsource MLIST
www.openwall.com/lists/oss-security/2008/09/24/2Mailing ListX Refsource MLIST
bugs.debian.org/cgi-bin/bugreport.cgi?bug=496410X Refsource CONFIRM
www.redhat.com/archives/fedora-package-announce/2008-October/msg00666.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/43362Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2011-0266.htmlVendor AdvisoryX Refsource REDHAT
access.redhat.com/errata/RHBA-2010:0266Advisory
bugzilla.redhat.com/show_bug.cgi?id=248006REPORT
bugzilla.redhat.com/show_bug.cgi?id=372901REPORT
bugzilla.redhat.com/show_bug.cgi?id=447481REPORT
bugzilla.redhat.com/show_bug.cgi?id=482913REPORT
bugzilla.redhat.com/show_bug.cgi?id=489809REPORT
bugzilla.redhat.com/show_bug.cgi?id=496748REPORT
bugzilla.redhat.com/show_bug.cgi?id=504158REPORT
bugzilla.redhat.com/show_bug.cgi?id=506928REPORT
bugzilla.redhat.com/show_bug.cgi?id=507514REPORT
bugzilla.redhat.com/show_bug.cgi?id=508262REPORT
bugzilla.redhat.com/show_bug.cgi?id=508722REPORT
bugzilla.redhat.com/show_bug.cgi?id=511113REPORT
bugzilla.redhat.com/show_bug.cgi?id=511346REPORT
bugzilla.redhat.com/show_bug.cgi?id=512343REPORT
bugzilla.redhat.com/show_bug.cgi?id=512947REPORT
bugzilla.redhat.com/show_bug.cgi?id=513260REPORT
bugzilla.redhat.com/show_bug.cgi?id=513285REPORT
bugzilla.redhat.com/show_bug.cgi?id=514260REPORT
bugzilla.redhat.com/show_bug.cgi?id=515446REPORT
bugzilla.redhat.com/show_bug.cgi?id=515731REPORT
bugzilla.redhat.com/show_bug.cgi?id=516085REPORT
bugzilla.redhat.com/show_bug.cgi?id=516111REPORT
bugzilla.redhat.com/show_bug.cgi?id=516763REPORT
bugzilla.redhat.com/show_bug.cgi?id=517399REPORT
bugzilla.redhat.com/show_bug.cgi?id=518622REPORT
bugzilla.redhat.com/show_bug.cgi?id=519670REPORT
bugzilla.redhat.com/show_bug.cgi?id=519697REPORT
bugzilla.redhat.com/show_bug.cgi?id=520458REPORT
bugzilla.redhat.com/show_bug.cgi?id=521817REPORT
bugzilla.redhat.com/show_bug.cgi?id=528832REPORT
bugzilla.redhat.com/show_bug.cgi?id=528938REPORT
bugzilla.redhat.com/show_bug.cgi?id=532138REPORT
bugzilla.redhat.com/show_bug.cgi?id=532773REPORT
bugzilla.redhat.com/show_bug.cgi?id=532916REPORT
bugzilla.redhat.com/show_bug.cgi?id=532920REPORT
bugzilla.redhat.com/show_bug.cgi?id=532922REPORT
bugzilla.redhat.com/show_bug.cgi?id=544482REPORT
bugzilla.redhat.com/show_bug.cgi?id=544664REPORT
bugzilla.redhat.com/show_bug.cgi?id=545054REPORT
bugzilla.redhat.com/show_bug.cgi?id=546082REPORT
bugzilla.redhat.com/show_bug.cgi?id=546340REPORT
bugzilla.redhat.com/show_bug.cgi?id=548577REPORT
bugzilla.redhat.com/show_bug.cgi?id=549113REPORT
bugzilla.redhat.com/show_bug.cgi?id=549473REPORT
bugzilla.redhat.com/show_bug.cgi?id=570530REPORT
bugzilla.redhat.com/show_bug.cgi?id=573834REPORT
security.access.redhat.com/data/csaf/v2/advisories/2010/rhba-2010_0266.jsonAdvisory
access.redhat.com/security/cve/CVE-2008-4192REPORT
www.cve.org/CVERecord?id=CVE-2008-4192Advisory
nvd.nist.gov/vuln/detail/CVE-2008-4192Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities