CVE-2008-4579: Gentoo Cman

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file.

Affected products

  • Gentoo Cman: version 2.02.00 only
  • Gentoo Fence: version 2.02.00 only

Published 2008-10-15. Last modified 2026-06-16.