CVSS: 7.2EPSS: 0%CPEs: 2EXPL: 0CVE-2008-4580
https://notcve.org/view.php?id=CVE-2008-4580
fence_manual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify arbitrary files via a symlink attack on the fence_manual.fifo temporary file. fence_manual, tal y como es usado en fence versión 2.02.00-r1 y posiblemente cman, permite a los usuarios locales modificar archivos arbitrarios por medio de un ataque de tipo symlink en el archivo temporal fence_manual.fifo. • http://bugs.gentoo.org/show_bug.cgi?id=240576 http://www.openwall.com/lists/oss-security/2008/10/13/3 http://www.openwall.com/lists/oss-security/2008/10/16/1 http://www.ubuntu.com/usn/USN-875-1 https://exchange.xforce.ibmcloud.com/vulnerabilities/45953 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 1.9EPSS: 0%CPEs: 2EXPL: 0CVE-2008-4579 – cman/fence: insecure temporary file usage in the apc fence agents
https://notcve.org/view.php?id=CVE-2008-4579
The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file. Los programas (1) fence_apc y (2) fence_apc_snmp,como se utilizan en (a) fence 2.02.00-r1 y posiblemente (b) cman, cuando se ejecutan en modo verbose, permiten a usuarios locales añadir a archivos de su elección mediante un ataque de enlaces simbólicos al archivo temporal apclog. • http://bugs.gentoo.org/show_bug.cgi?id=240576 http://secunia.com/advisories/32387 http://secunia.com/advisories/32390 http://secunia.com/advisories/36530 http://secunia.com/advisories/43362 http://www.openwall.com/lists/oss-security/2008/10/13/3 http://www.redhat.com/support/errata/RHSA-2009-1341.html http://www.redhat.com/support/errata/RHSA-2011-0266.html http://www.securityfocus.com/bid/31904 http://www.ubuntu.com/usn/USN-875-1 http://www.vupen.com&# • CWE-59: Improper Link Resolution Before File Access ('Link Following') CWE-377: Insecure Temporary File •
CVSS: 2.1EPSS: 0%CPEs: 8EXPL: 0CVE-2007-1505
https://notcve.org/view.php?id=CVE-2007-1505
Fujitsu FENCE-Pro before V5L01, and Systemwalker Desktop Encryption V12.0L10, V12.0L10A, V12.0L10B, V12.0L20 and V13.0.0 allows local users to obtain sensitive information by extracting the decoding password from certain "self-decoding" file types. Fujitsu FENCE-Pro versiones anteriores a V5L01, y Systemwalker Desktop Encryption versiones V12.0L10, V12.0L10A, V12.0L10B, V12.0L20 y V13.0.0, permite a usuarios locales obtener información confidencial extrayendo la contraseña de descodificación de ciertos tipos de archivos "self-decoding". • http://jvn.jp/jp/JVN%2319795972/index.html http://osvdb.org/34184 http://secunia.com/advisories/24537 http://secunia.com/advisories/24549 http://segroup.fujitsu.com/secure/products/fence/notice/alert20070316.html http://software.fujitsu.com/jp/security/products-fujitsu/solution/systemwalker_dte_200701.html http://www.securityfocus.com/bid/23001 https://exchange.xforce.ibmcloud.com/vulnerabilities/33029 •