The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file.
| Software | From | Fixed in |
|---|---|---|
| redhat / cman | 2.20080801 | 2.20080801.x |
| redhat / cman | 2.20080629 | 2.20080629.x |