Description
daemon.c in cman (redhat-cluster-suite) before 20070622 does not clear a buffer for reading requests, which might allow local users to obtain sensitive information from previous requests.
References
- 45381 vdb-entry
- clusterproject-proc-information-disclosure(35152) vdb-entry
- [cluster-devel] 20070619 cluster/cman/daemon daemon.c mailing-list