CVE-2008-6560: Buffer Overflow
Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines. NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6560?
CVE-2008-6560 has a high severity as it can lead to denial of service through CPU consumption and memory corruption.
How do I fix CVE-2008-6560?
To fix CVE-2008-6560, upgrade CMAN to version 2.03.09-1 or later.
Which software versions are affected by CVE-2008-6560?
CVE-2008-6560 affects CMAN versions up to 2.03.08-1 on Fedora 9 and various versions on Red Hat Enterprise Linux 5.
What type of vulnerability is identified in CVE-2008-6560?
CVE-2008-6560 is a buffer overflow vulnerability that can be exploited by supplying a malicious cluster.conf file.
Can CVE-2008-6560 be exploited by non-privileged users?
It is unclear if CVE-2008-6560 can be exploited by non-privileged users, as the privilege level required is not specified.