Published: 23/11/2013 Updated: 22/04/2019

CVSS v2 Base Score: 6.3 | Impact Score: 9.2 | Exploitability Score: 3.4

VMScore: 561

Vector: AV:L/AC:M/Au:N/C:N/I:C/A:C

OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2) ibdiagnet.fdbs, (3) ibdiagnet_ibis.log, (4) ibdiagnet.log, (5) ibdiagnet.lst, (6) ibdiagnet.mcfdbs, (7) ibdiagnet.pkey, (8) ibdiagnet.psl, (9) ibdiagnet.slvl, or (10) ibdiagnet.sm in /tmp/.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat enterprise linux 6.0
openfabrics ibutils 1.5.7

Synopsis Moderate: RDMA stack security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic Updated rdma, libibverbs, libmlx4, librdmacm, qperf, perftest, openmpi,compat-openmpi, infinipath-psm, mpitests, and rds-tools packages that fixtwo security issues, several bugs, and add v ...

Debian Bug report logs - #704063 ibutils: CVE-2013-2561 Package: ibutils; Maintainer for ibutils is Debian HPC Team <debian-hpc@listsdebianorg>; Source for ibutils is src:ibutils (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Wed, 27 Mar 2013 14:36:01 UTC Severity: grave Tags: securit ...

A flaw was found in the way ibutils handled temporary files A local attacker could use this flaw to cause arbitrary files to be overwritten as the root user via a symbolic link attack It was discovered that librdmacm used a static port to connect to the ib_acm service A local attacker able to run a specially crafted ib_acm service on that port c ...

CWE-59 http://www.openwall.com/lists/oss-security/2013/03/26/4 http://seclists.org/fulldisclosure/2013/Mar/87 http://www.openwall.com/lists/oss-security/2013/03/26/1 http://rhn.redhat.com/errata/RHSA-2013-1661.html http://www.openwall.com/lists/oss-security/2013/03/19/8 http://www.openwall.com/lists/oss-security/2013/03/26/11 https://bugzilla.redhat.com/show_bug.cgi?id=927430 http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html http://www.securityfocus.com/bid/58335 https://access.redhat.com/errata/RHSA-2013:1661 https://nvd.nist.gov https://alas.aws.amazon.com/ALAS-2013-256.html

CVE-2013-2561

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect