CVE-2008-4192

The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local...

6.9 MediumPublic exploitFix available

The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.

Exploit likelihood

0.71%Down 0.8 points since Feb 4, 2022

What each source reports

NVD Score used 6.9

The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.

Record: CVE-2008-4192
CVSS 2.0: 6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-59
Updated: 2026-11-02

CVE List No score

The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.

Record: CVE-2008-4192
Updated: 2026-11-02

EUVDEUVD-2008-4175 No score

The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.

Record: EUVD-2008-4175
Updated: 2026-11-03

GitHub AdvisoriesGHSA-hpx5-6mfx-fq22 No score

The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local...

The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.

Record: GHSA-hpx5-6mfx-fq22
Weakness: CWE-59
Updated: 2026-11-02

Affected products

redhat cman

Affected packages

Affected packages
Package	Affected	Fixed
`cman` Red Hat:enterprise_linux:5::client_workstation	before 0:2.0.115-34.el5	0:2.0.115-34.el5
`cman-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 0:2.0.115-34.el5	0:2.0.115-34.el5
`cman-devel` Red Hat:enterprise_linux:5::client_workstation	before 0:2.0.115-34.el5	0:2.0.115-34.el5
`cman` Red Hat:enterprise_linux:5::server	before 0:2.0.115-34.el5	0:2.0.115-34.el5
`cman-debuginfo` Red Hat:enterprise_linux:5::server	before 0:2.0.115-34.el5	0:2.0.115-34.el5
`cman-devel` Red Hat:enterprise_linux:5::server	before 0:2.0.115-34.el5	0:2.0.115-34.el5
`fence` Red Hat:rhel_cluster:4	before 0:1.32.68-5.el4	0:1.32.68-5.el4
`fence-debuginfo` Red Hat:rhel_cluster:4	before 0:1.32.68-5.el4	0:1.32.68-5.el4

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Adobe Flash Player - AVM Verification Logic Array Indexing Code Execution (Metasploit)	2012-06-20

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-4192 is a medium vulnerability (CVSS 6.9) in Redhat Cman, published September 29, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 53rd percentile. Fixed in cman 0:2.0.115-34.el5.

References

Show 86 moreShow less