VULNERABILITY INTELLIGENCE

CVE-2008-6552

CVSS score6.9 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2009-03-30
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.

Weakness classification

  • CWE-59: Improper Link Resolution Before File Access ('Link Following')

Primary references