Red Hat Cman vulnerabilities

3 CVEs affecting Red Hat Cman, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-6560, published 2009-03-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-6560, published 2009-03-31. High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days. Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption)…
CVE-2008-4192, published 2008-09-29. Medium severity, CVSS 6.9. EPSS: 0.7% chance of exploitation in the next 30 days. The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.
CVE-2008-6552, published 2009-03-30. Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days. Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager)…