CVE-2011-4339

ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.

CVSS v2.0 3.6 LOW

3.6^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:N/I:P/A:P

Exploitability : 3.9 / Impact : 4.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://openwall.com/lists/oss-security/2011/12/13/1	Mailing List Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=742837	Issue Tracking Patch
http://www.mandriva.com/security/advisories?name=MDVSA-2011:196	Broken Link
http://www.redhat.com/support/errata/RHSA-2011-1814.html	Third Party Advisory
http://secunia.com/advisories/47173	Broken Link
http://secunia.com/advisories/47228	Broken Link
http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071575.html	Third Party Advisory
http://www.debian.org/security/2011/dsa-2376	Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071580.html	Third Party Advisory
http://secunia.com/advisories/47376	Broken Link
http://rhn.redhat.com/errata/RHSA-2013-0123.html	Third Party Advisory
http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	Third Party Advisory
http://www.securityfocus.com/bid/51036	Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/71763	Third Party Advisory VDB Entry

Advertisement

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:ipmitool_project:ipmitool:1.8.11:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

Information

Published : 2011-12-14 19:57

Updated : 2022-02-03 11:59

NVD link : CVE-2011-4339

Mitre link : CVE-2011-4339

JSON object : View

CWE

CWE-732

Incorrect Permission Assignment for Critical Resource

Advertisement

Products Affected

ipmitool_project

ipmitool

redhat

enterprise_linux

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://openwall.com/lists/oss-security/2011/12/13/1", "name": "[oss-security] 20111213 OpenIPMI: IPMI event daemon creates PID file with world writeable permissions", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "MLIST"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=742837", "name": "https://bugzilla.redhat.com/show_bug.cgi?id=742837", "tags": ["Issue Tracking", "Patch"], "refsource": "CONFIRM"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:196", "name": "MDVSA-2011:196", "tags": ["Broken Link"], "refsource": "MANDRIVA"}, {"url": "http://www.redhat.com/support/errata/RHSA-2011-1814.html", "name": "RHSA-2011:1814", "tags": ["Third Party Advisory"], "refsource": "REDHAT"}, {"url": "http://secunia.com/advisories/47173", "name": "47173", "tags": ["Broken Link"], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/47228", "name": "47228", "tags": ["Broken Link"], "refsource": "SECUNIA"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071575.html", "name": "FEDORA-2011-17071", "tags": ["Third Party Advisory"], "refsource": "FEDORA"}, {"url": "http://www.debian.org/security/2011/dsa-2376", "name": "DSA-2376", "tags": ["Third Party Advisory"], "refsource": "DEBIAN"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071580.html", "name": "FEDORA-2011-17065", "tags": ["Third Party Advisory"], "refsource": "FEDORA"}, {"url": "http://secunia.com/advisories/47376", "name": "47376", "tags": ["Broken Link"], "refsource": "SECUNIA"}, {"url": "http://rhn.redhat.com/errata/RHSA-2013-0123.html", "name": "RHSA-2013:0123", "tags": ["Third Party Advisory"], "refsource": "REDHAT"}, {"url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf", "name": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html", "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/51036", "name": "51036", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BID"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71763", "name": "impitool-pid-dos(71763)", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-732"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2011-4339", "ASSIGNER": "secalert@redhat.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 3.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "severity": "LOW", "impactScore": 4.9, "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2011-12-15T03:57Z", "configurations": {"nodes": [{"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:ipmitool_project:ipmitool:1.8.11:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2022-02-03T19:59Z"}