Description
The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | cman +1 | 2.0.115-1.el5 | RHSA-2009:1341 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Cluster 4 | fence | 1.32.68-5.el4 | RHSA-2011:0266 |
Advisories 2
- RHSA-2009:1341 Red Hat Security Advisory: cman security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2011:0266 Red Hat Security Advisory: fence security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- http://bugs.gentoo.org/show_bug.cgi?id=240576
- RHSA-2009:1341 vendor-advisory
- 32390 third-party-advisory
- 32387 third-party-advisory
- oval:org.mitre.oval:def:10799 vdb-entry signature
- ADV-2011-0419 vdb-entry
- USN-875-1 vendor-advisory
- 31904 vdb-entry
- [oss-security] 20081013 Re: CVE Request mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=467386
- 36530 third-party-advisory
- FEDORA-2008-9042 vendor-advisory
- 43362 third-party-advisory
- RHSA-2011:0266 vendor-advisory