Every CVESearch/Get API key

CVE-2008-6552

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink...

6.9 MediumFix available

CVE-2008-6552 is a medium vulnerability (CVSS 6.9) in Fedoraproject Fedora, published March 30, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in gfs2-utils 0:0.1.62-1.el5.

What does this mean?
Severity
6.9 MediumCVSS 2.0, NVD
Exploit chance
0.38%EPSS, 32nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0:0.1.62-1.el5gfs2-utils +16 more

Description

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.

Exploit likelihood

0.38%Down 1.2 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gfs2-utils
Red Hat:enterprise_linux:5::client
before 0:0.1.62-1.el5
0:0.1.62-1.el5
gfs2-utils-debuginfo
Red Hat:enterprise_linux:5::client
before 0:0.1.62-1.el5
0:0.1.62-1.el5
gfs2-utils
Red Hat:enterprise_linux:5::server
before 0:0.1.62-1.el5
0:0.1.62-1.el5
gfs2-utils-debuginfo
Red Hat:enterprise_linux:5::server
before 0:0.1.62-1.el5
0:0.1.62-1.el5
rgmanager
Red Hat:rhel_cluster:5
before 0:2.0.52-1.el5
0:2.0.52-1.el5
rgmanager-debuginfo
Red Hat:rhel_cluster:5
before 0:2.0.52-1.el5
0:2.0.52-1.el5
cman
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:2.0.115-1.el5
0:2.0.115-1.el5
cman-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:2.0.115-1.el5
0:2.0.115-1.el5
cman-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:2.0.115-1.el5
0:2.0.115-1.el5
cman
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:2.0.115-1.el5
0:2.0.115-1.el5
Show 7 moreShow less
Affected packages
PackageAffectedFixed
cman-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:2.0.115-1.el5
0:2.0.115-1.el5
cman-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:2.0.115-1.el5
0:2.0.115-1.el5
rgmanager
Red Hat:rhel_cluster:4
From an advisory covering 2 CVEs
before 0:1.9.88-2.el4
0:1.9.88-2.el4
rgmanager-debuginfo
Red Hat:rhel_cluster:4
From an advisory covering 2 CVEs
before 0:1.9.88-2.el4
0:1.9.88-2.el4
ccs
Red Hat:rhel_cluster:4
before 0:1.0.13-2
0:1.0.13-2
ccs-debuginfo
Red Hat:rhel_cluster:4
before 0:1.0.13-2
0:1.0.13-2
ccs-devel
Red Hat:rhel_cluster:4
before 0:1.0.13-2
0:1.0.13-2

What each source reports

NVD Score used6.9

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.

Record
CVE-2008-6552
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-59
Updated
2026-11-02
CVE ListNo score

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.

Record
CVE-2008-6552
Updated
2026-11-02
EUVDEUVD-2008-6515No score

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.

Record
EUVD-2008-6515
Updated
2026-11-03
GitHub AdvisoriesGHSA-mmp4-x7mg-mw3wNo score

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink...

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.

Record
GHSA-mmp4-x7mg-mw3w
Weakness
CWE-59
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 127 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open