Description
fence_manual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify arbitrary files via a symlink attack on the fence_manual.fifo temporary file.
References
- [oss-security] 20081016 Re: CVE Request mailing-list
- http://bugs.gentoo.org/show_bug.cgi?id=240576
- fence-fencemanual-symlink(45953) vdb-entry
- USN-875-1 vendor-advisory
- [oss-security] 20081013 Re: CVE Request mailing-list