CVE-2008-4579

no score yetEPSS 0.4%

The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file.

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWE: CWE-59
Published: 2008-10-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

gentoo:cman
gentoo:fence

References

http://bugs.gentoo.org/show_bug.cgi?id=240576
http://secunia.com/advisories/32387
http://secunia.com/advisories/32390
http://secunia.com/advisories/36530
http://secunia.com/advisories/43362

Check your stack JSON