{"id":"CVE-2008-4192","aliases":["EUVD-2008-4175","GHSA-hpx5-6mfx-fq22","RHBA-2010:0266","RHSA-2011:0266"],"status":"published","title":"The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local...","description":"The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.","severity":{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00711,"percentile":0.53808,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-59"],"published":"2008-09-29T17:00:00Z","modified":"2026-06-26T10:15:26Z","exploits":[{"source":"exploitdb","id":"EDB-19295","title":"Adobe Flash Player - AVM Verification Logic Array Indexing Code Execution (Metasploit)","type":"remote","platform":"windows","date":"2012-06-20","verified":true,"url":"https://www.exploit-db.com/exploits/19295"}],"fixes":[{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"cman","fixed_in":["0:2.0.115-34.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"cman-debuginfo","fixed_in":["0:2.0.115-34.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"cman-devel","fixed_in":["0:2.0.115-34.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"cman","fixed_in":["0:2.0.115-34.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"cman-debuginfo","fixed_in":["0:2.0.115-34.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"cman-devel","fixed_in":["0:2.0.115-34.el5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"cman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.115-34.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"cman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.115-34.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"cman-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.115-34.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"cman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.115-34.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"cman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.115-34.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"cman-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.115-34.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_cluster:4","package":"fence","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.32.68-5.el4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_cluster:4","package":"fence-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.32.68-5.el4"}]}],"bundled":2}],"products":[{"vendor":"redhat","product":"cman"}],"references":[{"url":"http://www.securityfocus.com/bid/30898","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/32390","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/30/2","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://dev.gentoo.org/~rbu/security/debiantemp/cman","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/32387","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=235770","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/31887","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://uvw.ru/report.lenny.txt","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44845","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2011/0419","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-875-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=460476","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/18/3","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2008/09/24/2","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496410","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00666.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://secunia.com/advisories/43362","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0266.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4192","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hpx5-6mfx-fq22"},{"url":"https://access.redhat.com/errata/RHBA-2010:0266","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=248006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=372901","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=447481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=482913","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=489809","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=496748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=504158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=506928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=507514","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=508262","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=508722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=511113","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=511346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512343","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=512947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=513260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=513285","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=514260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=515731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=516085","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=516111","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=516763","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=517399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=518622","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=520458","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=521817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=528832","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=528938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=544482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=544664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=545054","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546082","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=548577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=549113","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=549473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=570530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=573834","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhba-2010_0266.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4192","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4192","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2011:0266","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=467386","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=491643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=494587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=498870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=498983","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=501890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=504589","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=508268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=510279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=545193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=545682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=576036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=576178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=584133","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0266.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-4579","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-4579","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4579","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2008-4192","description":"The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.","status":"published","published":"2008-09-29T17:00:00Z","modified":"2024-08-07T10:08:34.854Z","updated_at":"2026-11-02T14:34:47.310062Z"}],"euvd":[{"id":"EUVD-2008-4175","description":"The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.","status":"published","published":"2008-09-29T17:00:00Z","modified":"2024-08-07T10:08:34Z","updated_at":"2026-11-03T01:38:48.91451Z"}],"ghsa":[{"id":"GHSA-hpx5-6mfx-fq22","title":"The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local...","description":"The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.","status":"published","published":"2022-05-02T00:07:55Z","modified":"2023-01-31T05:07:16Z","cwes":["CWE-59"],"updated_at":"2026-11-02T14:49:10.75849Z"}],"nvd":[{"id":"CVE-2008-4192","description":"The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.","status":"published","published":"2008-09-29T17:17:29.157Z","modified":"2026-06-16T22:57:20.96Z","cvss":[{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:01:28.625777Z"}],"osv":[{"id":"RHBA-2010:0266","title":"Red Hat Bug Fix Advisory: cman bug fix and enhancement update","status":"published","published":"2024-09-15T18:15:59Z","modified":"2026-06-26T10:12:43Z","updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHSA-2011:0266","title":"Red Hat Security Advisory: fence security, bug fix, and enhancement update","status":"published","published":"2024-09-15T18:15:54Z","modified":"2026-06-26T10:15:26Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}