CVE-2008-4192

The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.

Date published : 2008-09-29

http://www.securityfocus.com/bid/30898

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496410