CVE-2008-4192 is a local privilege escalation vulnerability affecting Red Hat cman versions 2.20080629 and 2.20080801. It allows local attackers to overwrite arbitrary files through a symlink attack on the /tmp/eglog temporary file within the pserver_shutdown function. With a CVSS score of 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C), this vulnerability has high impact on confidentiality, integrity, and availability, but requires local access and medium attack complexity. There is no evidence of active exploitation, no known public exploit code, and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.20080629CPE matchmatch criteria | cpe:2.3:a:redhat:cman:2.20080629:*:*:*:*:*:*:* | ||
2.20080801CPE matchmatch criteria | cpe:2.3:a:redhat:cman:2.20080801:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.