ID CESA-2013:0123 Type centos Reporter CentOS Project Modified 2013-01-11T13:18:46
Description
CentOS Errata and Security Advisory CESA-2013:0123
The OpenIPMI packages provide command line tools and utilities to access
platform information using Intelligent Platform Management Interface
(IPMI). System administrators can use OpenIPMI to manage systems and to
perform system health monitoring.
It was discovered that the IPMI event daemon (ipmievd) created its process
ID (PID) file with world-writable permissions. A local user could use this
flaw to make the ipmievd init script kill an arbitrary process when the
ipmievd daemon is stopped or restarted. (CVE-2011-4339)
Note: This issue did not affect the default configuration of OpenIPMI as
shipped with Red Hat Enterprise Linux 5.
This update also fixes the following bugs:
Prior to this update, the ipmitool utility first checked the IPMI
hardware for Dell IPMI extensions and listed only supported commands when
printing command usage like the option "ipmtool delloem help". On a
non-Dell platform, the usage text was incomplete and misleading. This
update lists all Dell OEM extensions in usage texts on all platforms, which
allows users to check for command line arguments on non-Dell hardware.
(BZ#658762)
Prior to this update, the ipmitool utility tried to retrieve the Sensor
Data Records (SDR) from the IPMI bus instead of the Baseboard Management
Controller (BMC) bus when IPMI-enabled devices reported SDR under a
different owner than the BMC. As a consequence, the timeout setting for the
SDR read attempt could significantly decrease the performance and no sensor
data was shown. This update modifies ipmitool to read these SDR records
from the BMC and shows the correct sensor data on these platforms.
(BZ#671059, BZ#749796)
Prior to this update, the exit code of the "ipmitool -o list" option was
not set correctly. As a consequence, "ipmitool -o list" always returned the
value 1 instead of the expected value 0. This update modifies the
underlying code to return the value 0 as expected. (BZ#740780)
Prior to this update, the "ipmi" service init script did not specify the
full path to the "/sbin/lsmod" and "/sbin/modprobe" system utilities. As a
consequence, the init script failed when it was executed if PATH did not
point to /sbin, for example, when running "sudo /etc/init.d/ipmi". This
update modifies the init script so that it now contains the full path to
lsmod and modrpobe. Now, it can be executed with sudo. (BZ#829705)
Prior to this update, the ipmitool man page did not list the "-b", "-B",
"-l" and "-T" options. In this update, these options are documented in the
ipmitool man page. (BZ#846596)
This update also adds the following enhancement:
Updates to the Dell-specific IPMI extension: A new vFlash command, which
allows users to display information about extended SD cards; a new setled
command, which allows users to display the backplane LED status; improved
error descriptions; added support for new hardware; and updated
documentation of the ipmitool delloem commands in the ipmitool manual
page. (BZ#797050)
All users of OpenIPMI are advised to upgrade to these updated packages,
which contain backported patches to correct these issues and add this
enhancement.
Merged security bulletin from advisories:
http://lists.centos.org/pipermail/centos-announce/2013-January/031189.html
http://lists.centos.org/pipermail/centos-cr-announce/2013-January/006607.html
{"href": "http://lists.centos.org/pipermail/centos-announce/2013-January/031189.html", "id": "CESA-2013:0123", "reporter": "CentOS Project", "published": "2013-01-09T20:22:45", "description": "**CentOS Errata and Security Advisory** CESA-2013:0123\n\n\nThe OpenIPMI packages provide command line tools and utilities to access\nplatform information using Intelligent Platform Management Interface\n(IPMI). System administrators can use OpenIPMI to manage systems and to\nperform system health monitoring.\n\nIt was discovered that the IPMI event daemon (ipmievd) created its process\nID (PID) file with world-writable permissions. A local user could use this\nflaw to make the ipmievd init script kill an arbitrary process when the\nipmievd daemon is stopped or restarted. (CVE-2011-4339)\n\nNote: This issue did not affect the default configuration of OpenIPMI as\nshipped with Red Hat Enterprise Linux 5.\n\nThis update also fixes the following bugs:\n\n* Prior to this update, the ipmitool utility first checked the IPMI\nhardware for Dell IPMI extensions and listed only supported commands when\nprinting command usage like the option \"ipmtool delloem help\". On a\nnon-Dell platform, the usage text was incomplete and misleading. This\nupdate lists all Dell OEM extensions in usage texts on all platforms, which\nallows users to check for command line arguments on non-Dell hardware.\n(BZ#658762)\n\n* Prior to this update, the ipmitool utility tried to retrieve the Sensor\nData Records (SDR) from the IPMI bus instead of the Baseboard Management\nController (BMC) bus when IPMI-enabled devices reported SDR under a\ndifferent owner than the BMC. As a consequence, the timeout setting for the\nSDR read attempt could significantly decrease the performance and no sensor\ndata was shown. This update modifies ipmitool to read these SDR records\nfrom the BMC and shows the correct sensor data on these platforms.\n(BZ#671059, BZ#749796)\n\n* Prior to this update, the exit code of the \"ipmitool -o list\" option was\nnot set correctly. As a consequence, \"ipmitool -o list\" always returned the\nvalue 1 instead of the expected value 0. This update modifies the\nunderlying code to return the value 0 as expected. (BZ#740780)\n\n* Prior to this update, the \"ipmi\" service init script did not specify the\nfull path to the \"/sbin/lsmod\" and \"/sbin/modprobe\" system utilities. As a\nconsequence, the init script failed when it was executed if PATH did not\npoint to /sbin, for example, when running \"sudo /etc/init.d/ipmi\". This\nupdate modifies the init script so that it now contains the full path to\nlsmod and modrpobe. Now, it can be executed with sudo. (BZ#829705)\n\n* Prior to this update, the ipmitool man page did not list the \"-b\", \"-B\",\n\"-l\" and \"-T\" options. In this update, these options are documented in the\nipmitool man page. (BZ#846596)\n\nThis update also adds the following enhancement:\n\n* Updates to the Dell-specific IPMI extension: A new vFlash command, which\nallows users to display information about extended SD cards; a new setled\ncommand, which allows users to display the backplane LED status; improved\nerror descriptions; added support for new hardware; and updated\ndocumentation of the ipmitool delloem commands in the ipmitool manual\npage. (BZ#797050)\n\nAll users of OpenIPMI are advised to upgrade to these updated packages,\nwhich contain backported patches to correct these issues and add this\nenhancement.\n\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2013-January/031189.html\nhttp://lists.centos.org/pipermail/centos-cr-announce/2013-January/006607.html\n\n**Affected packages:**\nOpenIPMI\nOpenIPMI-devel\nOpenIPMI-gui\nOpenIPMI-libs\nOpenIPMI-perl\nOpenIPMI-python\nOpenIPMI-tools\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2013-0123.html", "title": "OpenIPMI security update", "affectedPackage": [{"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-perl-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI-perl", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-perl-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI-perl", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-gui-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI-gui", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-gui-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI-gui", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "any", "operator": "lt", "packageFilename": "OpenIPMI-2.0.16-16.el5.src.rpm", "packageName": "OpenIPMI", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "any", "operator": "lt", "packageFilename": "OpenIPMI-2.0.16-16.el5.src.rpm", "packageName": "OpenIPMI", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-libs-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI-libs", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-libs-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI-libs", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-libs-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI-libs", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-libs-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI-libs", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "x86_64", "operator": "lt", "packageFilename": "OpenIPMI-2.0.16-16.el5.x86_64.rpm", "packageName": "OpenIPMI", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "x86_64", "operator": "lt", "packageFilename": "OpenIPMI-2.0.16-16.el5.x86_64.rpm", "packageName": "OpenIPMI", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-tools-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI-tools", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-tools-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI-tools", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "x86_64", "operator": "lt", "packageFilename": "OpenIPMI-python-2.0.16-16.el5.x86_64.rpm", "packageName": "OpenIPMI-python", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "x86_64", "operator": "lt", "packageFilename": "OpenIPMI-python-2.0.16-16.el5.x86_64.rpm", "packageName": "OpenIPMI-python", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "x86_64", "operator": "lt", "packageFilename": "OpenIPMI-devel-2.0.16-16.el5.x86_64.rpm", "packageName": "OpenIPMI-devel", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "x86_64", "operator": "lt", "packageFilename": "OpenIPMI-devel-2.0.16-16.el5.x86_64.rpm", "packageName": "OpenIPMI-devel", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "x86_64", "operator": "lt", "packageFilename": "OpenIPMI-gui-2.0.16-16.el5.x86_64.rpm", "packageName": "OpenIPMI-gui", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "x86_64", "operator": "lt", "packageFilename": "OpenIPMI-gui-2.0.16-16.el5.x86_64.rpm", "packageName": "OpenIPMI-gui", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "x86_64", "operator": "lt", "packageFilename": "OpenIPMI-libs-2.0.16-16.el5.x86_64.rpm", "packageName": "OpenIPMI-libs", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "x86_64", "operator": "lt", "packageFilename": "OpenIPMI-libs-2.0.16-16.el5.x86_64.rpm", "packageName": "OpenIPMI-libs", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-python-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI-python", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-python-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI-python", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "x86_64", "operator": "lt", "packageFilename": "OpenIPMI-tools-2.0.16-16.el5.x86_64.rpm", "packageName": "OpenIPMI-tools", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "x86_64", "operator": "lt", "packageFilename": "OpenIPMI-tools-2.0.16-16.el5.x86_64.rpm", "packageName": "OpenIPMI-tools", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-devel-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI-devel", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-devel-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI-devel", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-devel-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI-devel", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "i386", "operator": "lt", "packageFilename": "OpenIPMI-devel-2.0.16-16.el5.i386.rpm", "packageName": "OpenIPMI-devel", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "x86_64", "operator": "lt", "packageFilename": "OpenIPMI-perl-2.0.16-16.el5.x86_64.rpm", "packageName": "OpenIPMI-perl", "packageVersion": "2.0.16-16.el5"}, {"OS": "CentOS", "OSVersion": "5", "arch": "x86_64", "operator": "lt", "packageFilename": "OpenIPMI-perl-2.0.16-16.el5.x86_64.rpm", "packageName": "OpenIPMI-perl", "packageVersion": "2.0.16-16.el5"}], "bulletinFamily": "unix", "type": "centos", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}, "references": ["https://rhn.redhat.com/errata/RHSA-2013-0123.html", "http://steadfast.net/"], "edition": 89, "cvelist": ["CVE-2011-4339"], "lastseen": "2020-10-30T13:22:43", "viewCount": 6, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2011-4339"]}, {"type": "openvas", "idList": ["OPENVAS:70695", "OPENVAS:863674", "OPENVAS:870878", "OPENVAS:881362", "OPENVAS:1361412562310123752", "OPENVAS:831515", "OPENVAS:1361412562310863674", "OPENVAS:870715", "OPENVAS:1361412562310863890", "OPENVAS:881560"]}, {"type": "centos", "idList": ["CESA-2011:1814"]}, {"type": "oraclelinux", "idList": ["ELSA-2011-1814", "ELSA-2013-0123"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:27540", "SECURITYVULNS:VULN:12135"]}, {"type": "debian", "idList": ["DEBIAN:DSA-2376-2:DC490", "DEBIAN:DSA-2376-1:2E29C"]}, {"type": "nessus", "idList": ["SL_20111213_IPMITOOL_ON_SL6_X.NASL", "SOLARIS11_IPMITOOL_20121120.NASL", "FEDORA_2011-17071.NASL", "MANDRIVA_MDVSA-2011-196.NASL", "SL_20130108_OPENIPMI_ON_SL5_X.NASL", "REDHAT-RHSA-2011-1814.NASL", "FEDORA_2011-17065.NASL", "ORACLELINUX_ELSA-2011-1814.NASL", "REDHAT-RHSA-2013-0123.NASL", "CENTOS_RHSA-2013-0123.NASL"]}, {"type": "redhat", "idList": ["RHSA-2011:1850", "RHSA-2013:0123", "RHSA-2011:1814"]}, {"type": "fedora", "idList": ["FEDORA:EDAAE21010", "FEDORA:9443C20E72"]}], "modified": "2020-10-30T13:22:43", "rev": 2}, "score": {"value": 6.5, "vector": "NONE", "modified": "2020-10-30T13:22:43", "rev": 2}, "vulnersScore": 6.5}, "modified": "2013-01-11T13:18:46", "scheme": null}
{"cve": [{"lastseen": "2020-10-03T11:39:33", "description": "ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.", "edition": 3, "cvss3": {}, "published": "2011-12-15T03:57:00", "title": "CVE-2011-4339", "type": "cve", "cwe": ["CWE-264"], "bulletinFamily": "NVD", "cvss2": {"severity": "LOW", "exploitabilityScore": 3.9, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "NONE", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 3.6, "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:P", "version": "2.0", "accessVector": "LOCAL", "authentication": "NONE"}, "impactScore": 4.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2011-4339"], "modified": "2017-08-29T01:30:00", "cpe": ["cpe:/a:corey_minyard:openipmi:1.8.11"], "id": "CVE-2011-4339", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-4339", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}, "cpe23": ["cpe:2.3:a:corey_minyard:openipmi:1.8.11:*:*:*:*:*:*:*"]}], "openvas": [{"lastseen": "2017-07-25T10:52:02", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "description": "Check for the Version of OpenIPMI", "modified": "2017-07-10T00:00:00", "published": "2013-01-21T00:00:00", "id": "OPENVAS:881560", "href": "http://plugins.openvas.org/nasl.php?oid=881560", "type": "openvas", "title": "CentOS Update for OpenIPMI CESA-2013:0123 centos5 ", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# CentOS Update for OpenIPMI CESA-2013:0123 centos5 \n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2013 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"The OpenIPMI packages provide command line tools and utilities to access\n platform information using Intelligent Platform Management Interface\n (IPMI). System administrators can use OpenIPMI to manage systems and to\n perform system health monitoring.\n\n It was discovered that the IPMI event daemon (ipmievd) created its process\n ID (PID) file with world-writable permissions. A local user could use this\n flaw to make the ipmievd init script kill an arbitrary process when the\n ipmievd daemon is stopped or restarted. (CVE-2011-4339)\n \n Note: This issue did not affect the default configuration of OpenIPMI as\n shipped with Red Hat Enterprise Linux 5.\n \n This update also fixes the following bugs:\n \n * Prior to this update, the ipmitool utility first checked the IPMI\n hardware for Dell IPMI extensions and listed only supported commands when\n printing command usage like the option "ipmtool delloem help". On a\n non-Dell platform, the usage text was incomplete and misleading. This\n update lists all Dell OEM extensions in usage texts on all platforms, which\n allows users to check for command line arguments on non-Dell hardware.\n (BZ#658762)\n \n * Prior to this update, the ipmitool utility tried to retrieve the Sensor\n Data Records (SDR) from the IPMI bus instead of the Baseboard Management\n Controller (BMC) bus when IPMI-enabled devices reported SDR under a\n different owner than the BMC. As a consequence, the timeout setting for the\n SDR read attempt could significantly decrease the performance and no sensor\n data was shown. This update modifies ipmitool to read these SDR records\n from the BMC and shows the correct sensor data on these platforms.\n (BZ#671059, BZ#749796)\n \n * Prior to this update, the exit code of the "ipmitool -o list" option was\n not set correctly. As a consequence, "ipmitool -o list" always returned the\n value 1 instead of the expected value 0. This update modifies the\n underlying code to return the value 0 as expected. (BZ#740780)\n \n * Prior to this update, the "ipmi" service init script did not specify the\n full path to the "/sbin/lsmod" and "/sbin/modprobe" system utilities. As a\n consequence, the init script failed when it was executed if PATH did not\n point to /sbin, for example, when running "sudo /etc/init.d/ipmi". This\n update modifies the init script so that it now contains the full path to\n lsmod and modrpobe. Now, it can be executed with sudo. (BZ#829705)\n \n * Prior to this update, the ipmitool man page did not list the "-b", "-B",\n "-l&qu ... \n\n Description truncated, for more information please check the Reference URL\";\n\n\ntag_affected = \"OpenIPMI on CentOS 5\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.centos.org/pipermail/centos-announce/2013-January/019151.html\");\n script_id(881560);\n script_version(\"$Revision: 6655 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-07-10 13:48:58 +0200 (Mon, 10 Jul 2017) $\");\n script_tag(name:\"creation_date\", value:\"2013-01-21 09:38:06 +0530 (Mon, 21 Jan 2013)\");\n script_cve_id(\"CVE-2011-4339\");\n script_tag(name:\"cvss_base\", value:\"3.6\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_xref(name: \"CESA\", value: \"2013:0123\");\n script_name(\"CentOS Update for OpenIPMI CESA-2013:0123 centos5 \");\n\n script_summary(\"Check for the Version of OpenIPMI\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2013 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"CentOS5\")\n{\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI\", rpm:\"OpenIPMI~2.0.16~16.el5\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-devel\", rpm:\"OpenIPMI-devel~2.0.16~16.el5\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-gui\", rpm:\"OpenIPMI-gui~2.0.16~16.el5\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-libs\", rpm:\"OpenIPMI-libs~2.0.16~16.el5\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-perl\", rpm:\"OpenIPMI-perl~2.0.16~16.el5\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-python\", rpm:\"OpenIPMI-python~2.0.16~16.el5\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-tools\", rpm:\"OpenIPMI-tools~2.0.16~16.el5\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 3.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2019-05-29T18:38:32", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "description": "The remote host is missing an update for the ", "modified": "2019-03-15T00:00:00", "published": "2012-04-02T00:00:00", "id": "OPENVAS:1361412562310863890", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310863890", "type": "openvas", "title": "Fedora Update for ipmitool FEDORA-2011-17065", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Fedora Update for ipmitool FEDORA-2011-17065\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2012 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_xref(name:\"URL\", value:\"http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071580.html\");\n script_oid(\"1.3.6.1.4.1.25623.1.0.863890\");\n script_version(\"$Revision: 14223 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 14:49:35 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2012-04-02 12:30:08 +0530 (Mon, 02 Apr 2012)\");\n script_cve_id(\"CVE-2011-4339\");\n script_tag(name:\"cvss_base\", value:\"3.6\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_xref(name:\"FEDORA\", value:\"2011-17065\");\n script_name(\"Fedora Update for ipmitool FEDORA-2011-17065\");\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'ipmitool'\n package(s) announced via the referenced advisory.\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2012 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\", re:\"ssh/login/release=FC16\");\n script_tag(name:\"affected\", value:\"ipmitool on Fedora 16\");\n script_tag(name:\"solution\", value:\"Please install the updated package(s).\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"FC16\")\n{\n\n if ((res = isrpmvuln(pkg:\"ipmitool\", rpm:\"ipmitool~1.8.11~8.fc16\", rls:\"FC16\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2019-05-29T18:37:58", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "description": "The remote host is missing an update for the ", "modified": "2019-03-15T00:00:00", "published": "2013-01-21T00:00:00", "id": "OPENVAS:1361412562310881560", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310881560", "type": "openvas", "title": "CentOS Update for OpenIPMI CESA-2013:0123 centos5", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# CentOS Update for OpenIPMI CESA-2013:0123 centos5\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2013 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_xref(name:\"URL\", value:\"http://lists.centos.org/pipermail/centos-announce/2013-January/019151.html\");\n script_oid(\"1.3.6.1.4.1.25623.1.0.881560\");\n script_version(\"$Revision: 14222 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 13:50:48 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2013-01-21 09:38:06 +0530 (Mon, 21 Jan 2013)\");\n script_cve_id(\"CVE-2011-4339\");\n script_tag(name:\"cvss_base\", value:\"3.6\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_xref(name:\"CESA\", value:\"2013:0123\");\n script_name(\"CentOS Update for OpenIPMI CESA-2013:0123 centos5\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'OpenIPMI'\n package(s) announced via the referenced advisory.\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2013 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\", re:\"ssh/login/release=CentOS5\");\n script_tag(name:\"affected\", value:\"OpenIPMI on CentOS 5\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n script_tag(name:\"insight\", value:\"The OpenIPMI packages provide command line tools and utilities to access\n platform information using Intelligent Platform Management Interface\n (IPMI). System administrators can use OpenIPMI to manage systems and to\n perform system health monitoring.\n\n It was discovered that the IPMI event daemon (ipmievd) created its process\n ID (PID) file with world-writable permissions. A local user could use this\n flaw to make the ipmievd init script kill an arbitrary process when the\n ipmievd daemon is stopped or restarted. (CVE-2011-4339)\n\n Note: This issue did not affect the default configuration of OpenIPMI as\n shipped with Red Hat Enterprise Linux 5.\n\n This update also fixes the following bugs:\n\n * Prior to this update, the ipmitool utility first checked the IPMI\n hardware for Dell IPMI extensions and listed only supported commands when\n printing command usage like the option 'ipmtool delloem help'. On a\n non-Dell platform, the usage text was incomplete and misleading. This\n update lists all Dell OEM extensions in usage texts on all platforms, which\n allows users to check for command line arguments on non-Dell hardware.\n (BZ#658762)\n\n * Prior to this update, the ipmitool utility tried to retrieve the Sensor\n Data Records (SDR) from the IPMI bus instead of the Baseboard Management\n Controller (BMC) bus when IPMI-enabled devices reported SDR under a\n different owner than the BMC. As a consequence, the timeout setting for the\n SDR read attempt could significantly decrease the performance and no sensor\n data was shown. This update modifies ipmitool to read these SDR records\n from the BMC and shows the correct sensor data on these platforms.\n (BZ#671059, BZ#749796)\n\n * Prior to this update, the exit code of the 'ipmitool -o list' option was\n not set correctly. As a consequence, 'ipmitool -o list' always returned the\n value 1 instead of the expected value 0. This update modifies the\n underlying code to return the value 0 as expected. (BZ#740780)\n\n * Prior to this update, the 'ipmi' service init script did not specify the\n full path to the '/sbin/lsmod' and '/sbin/modprobe' system utilities. As a\n consequence, the init script failed when it was executed if PATH did not\n point to /sbin, for example, when running 'sudo /etc/init.d/ipmi'. This\n update modifies the init script so that it now contains the full path to\n lsmod and modrpobe. Now, it can be executed with sudo. (BZ#829705)\n\n * Prior to this update, the ipmitool man page did not list the '-b', '-B',\n '-l' ...\n\n Description truncated, please see the referenced URL(s) for more information.\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"CentOS5\")\n{\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI\", rpm:\"OpenIPMI~2.0.16~16.el5\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-devel\", rpm:\"OpenIPMI-devel~2.0.16~16.el5\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-gui\", rpm:\"OpenIPMI-gui~2.0.16~16.el5\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-libs\", rpm:\"OpenIPMI-libs~2.0.16~16.el5\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-perl\", rpm:\"OpenIPMI-perl~2.0.16~16.el5\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-python\", rpm:\"OpenIPMI-python~2.0.16~16.el5\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-tools\", rpm:\"OpenIPMI-tools~2.0.16~16.el5\", rls:\"CentOS5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2018-02-05T11:10:14", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "description": "Check for the Version of OpenIPMI", "modified": "2018-02-03T00:00:00", "published": "2013-01-11T00:00:00", "id": "OPENVAS:870878", "href": "http://plugins.openvas.org/nasl.php?oid=870878", "type": "openvas", "title": "RedHat Update for OpenIPMI RHSA-2013:0123-01", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# RedHat Update for OpenIPMI RHSA-2013:0123-01\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2013 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"The OpenIPMI packages provide command line tools and utilities to access\n platform information using Intelligent Platform Management Interface\n (IPMI). System administrators can use OpenIPMI to manage systems and to\n perform system health monitoring.\n\n It was discovered that the IPMI event daemon (ipmievd) created its process\n ID (PID) file with world-writable permissions. A local user could use this\n flaw to make the ipmievd init script kill an arbitrary process when the\n ipmievd daemon is stopped or restarted. (CVE-2011-4339)\n\n Note: This issue did not affect the default configuration of OpenIPMI as\n shipped with Red Hat Enterprise Linux 5.\n\n This update also fixes the following bugs:\n\n * Prior to this update, the ipmitool utility first checked the IPMI\n hardware for Dell IPMI extensions and listed only supported commands when\n printing command usage like the option 'ipmtool delloem help'. On a\n non-Dell platform, the usage text was incomplete and misleading. This\n update lists all Dell OEM extensions in usage texts on all platforms, which\n allows users to check for command line arguments on non-Dell hardware.\n (BZ#658762)\n\n * Prior to this update, the ipmitool utility tried to retrieve the Sensor\n Data Records (SDR) from the IPMI bus instead of the Baseboard Management\n Controller (BMC) bus when IPMI-enabled devices reported SDR under a\n different owner than the BMC. As a consequence, the timeout setting for the\n SDR read attempt could significantly decrease the performance and no sensor\n data was shown. This update modifies ipmitool to read these SDR records\n from the BMC and shows the correct sensor data on these platforms.\n (BZ#671059, BZ#749796)\n\n Description truncated, for more information please check the Reference URL\";\n\n\ntag_affected = \"OpenIPMI on Red Hat Enterprise Linux (v. 5 server)\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"https://www.redhat.com/archives/rhsa-announce/2013-January/msg00006.html\");\n script_id(870878);\n script_version(\"$Revision: 8650 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-02-03 13:16:59 +0100 (Sat, 03 Feb 2018) $\");\n script_tag(name:\"creation_date\", value:\"2013-01-11 16:41:43 +0530 (Fri, 11 Jan 2013)\");\n script_cve_id(\"CVE-2011-4339\");\n script_tag(name:\"cvss_base\", value:\"3.6\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_xref(name: \"RHSA\", value: \"2013:0123-01\");\n script_name(\"RedHat Update for OpenIPMI RHSA-2013:0123-01\");\n\n script_tag(name: \"summary\" , value: \"Check for the Version of OpenIPMI\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2013 Greenbone Networks GmbH\");\n script_family(\"Red Hat Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/rhel\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"RHENT_5\")\n{\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI\", rpm:\"OpenIPMI~2.0.16~16.el5\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-debuginfo\", rpm:\"OpenIPMI-debuginfo~2.0.16~16.el5\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-devel\", rpm:\"OpenIPMI-devel~2.0.16~16.el5\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-gui\", rpm:\"OpenIPMI-gui~2.0.16~16.el5\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-libs\", rpm:\"OpenIPMI-libs~2.0.16~16.el5\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-perl\", rpm:\"OpenIPMI-perl~2.0.16~16.el5\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-python\", rpm:\"OpenIPMI-python~2.0.16~16.el5\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"OpenIPMI-tools\", rpm:\"OpenIPMI-tools~2.0.16~16.el5\", rls:\"RHENT_5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 3.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-07-24T12:55:54", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "description": "Check for the Version of ipmitool", "modified": "2017-07-06T00:00:00", "published": "2011-12-30T00:00:00", "id": "OPENVAS:831515", "href": "http://plugins.openvas.org/nasl.php?oid=831515", "type": "openvas", "title": "Mandriva Update for ipmitool MDVSA-2011:196 (ipmitool)", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Mandriva Update for ipmitool MDVSA-2011:196 (ipmitool)\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2011 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"A vulnerability has been discovered and corrected in ipmitool:\n\n ipmievd as used in the ipmitool package uses 0666 permissions for\n its ipmievd.pid PID file, which allows local users to kill arbitrary\n processes by writing to this file (CVE-2011-4339).\n\n In Mandriva the ipmievd daemon from the ipmitool package does not\n have an initscript to start and stop the service, however one could\n rather easily craft an initscript or start the service by other means\n rendering the system vulnerable to this issue.\n\n The updated packages have been patched to correct this issue.\";\ntag_solution = \"Please Install the Updated Packages.\";\n\ntag_affected = \"ipmitool on Mandriva Linux 2010.1,\n Mandriva Linux 2010.1/X86_64,\n Mandriva Enterprise Server 5,\n Mandriva Enterprise Server 5/X86_64\";\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.mandriva.com/security-announce/2011-12/msg00028.php\");\n script_id(831515);\n script_version(\"$Revision: 6570 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-07-06 15:06:35 +0200 (Thu, 06 Jul 2017) $\");\n script_tag(name:\"creation_date\", value:\"2011-12-30 09:13:10 +0530 (Fri, 30 Dec 2011)\");\n script_tag(name:\"cvss_base\", value:\"3.6\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_xref(name: \"MDVSA\", value: \"2011:196\");\n script_cve_id(\"CVE-2011-4339\");\n script_name(\"Mandriva Update for ipmitool MDVSA-2011:196 (ipmitool)\");\n\n script_summary(\"Check for the Version of ipmitool\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2011 Greenbone Networks GmbH\");\n script_family(\"Mandrake Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/mandriva_mandrake_linux\", \"ssh/login/release\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"MNDK_mes5\")\n{\n\n if ((res = isrpmvuln(pkg:\"ipmitool\", rpm:\"ipmitool~1.8.9~4.1mdvmes5.2\", rls:\"MNDK_mes5\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n\n\nif(release == \"MNDK_2010.1\")\n{\n\n if ((res = isrpmvuln(pkg:\"ipmitool\", rpm:\"ipmitool~1.8.11~8.1mdv2010.2\", rls:\"MNDK_2010.1\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 3.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2019-05-29T18:35:55", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "description": "Oracle Linux Local Security Checks ELSA-2011-1814", "modified": "2018-09-28T00:00:00", "published": "2015-10-06T00:00:00", "id": "OPENVAS:1361412562310122022", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310122022", "type": "openvas", "title": "Oracle Linux Local Check: ELSA-2011-1814", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: ELSA-2011-1814.nasl 11688 2018-09-28 13:36:28Z cfischer $\n#\n# Oracle Linux Local Check\n#\n# Authors:\n# Eero Volotinen <eero.volotinen@solinor.com>\n#\n# Copyright:\n# Copyright (c) 2015 Eero Volotinen, http://solinor.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.122022\");\n script_version(\"$Revision: 11688 $\");\n script_tag(name:\"creation_date\", value:\"2015-10-06 14:11:49 +0300 (Tue, 06 Oct 2015)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-09-28 15:36:28 +0200 (Fri, 28 Sep 2018) $\");\n script_name(\"Oracle Linux Local Check: ELSA-2011-1814\");\n script_tag(name:\"insight\", value:\"ELSA-2011-1814 - ipmitool security update. Please see the references for more insight.\");\n script_tag(name:\"solution\", value:\"Update the affected packages to the latest available version.\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"summary\", value:\"Oracle Linux Local Security Checks ELSA-2011-1814\");\n script_xref(name:\"URL\", value:\"http://linux.oracle.com/errata/ELSA-2011-1814.html\");\n script_cve_id(\"CVE-2011-4339\");\n script_tag(name:\"cvss_base\", value:\"3.6\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/oracle_linux\", \"ssh/login/release\", re:\"ssh/login/release=OracleLinux6\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Eero Volotinen\");\n script_family(\"Oracle Linux Local Security Checks\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"OracleLinux6\")\n{\n if ((res = isrpmvuln(pkg:\"ipmitool\", rpm:\"ipmitool~1.8.11~12.el6_2.1\", rls:\"OracleLinux6\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n\n}\nif (__pkg_match) exit(99);\n exit(0);\n\n", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2018-01-08T12:56:18", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "description": "Check for the Version of ipmitool", "modified": "2018-01-08T00:00:00", "published": "2012-07-09T00:00:00", "id": "OPENVAS:870715", "href": "http://plugins.openvas.org/nasl.php?oid=870715", "type": "openvas", "title": "RedHat Update for ipmitool RHSA-2011:1814-01", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# RedHat Update for ipmitool RHSA-2011:1814-01\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2012 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"The ipmitool package contains a command line utility for interfacing with\n devices that support the Intelligent Platform Management Interface (IPMI)\n specification. IPMI is an open standard for machine health, inventory, and\n remote power control.\n\n It was discovered that the IPMI event daemon (ipmievd) created its process\n ID (PID) file with world-writable permissions. A local user could use this\n flaw to make the ipmievd init script kill an arbitrary process when the\n ipmievd daemon is stopped or restarted. (CVE-2011-4339)\n\n All users of ipmitool are advised to upgrade to this updated package, which\n contains a backported patch to correct this issue. After installing this\n update, the IPMI event daemon (ipmievd) will be restarted automatically.\";\n\ntag_affected = \"ipmitool on Red Hat Enterprise Linux Server (v. 6),\n Red Hat Enterprise Linux Workstation (v. 6)\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"https://www.redhat.com/archives/rhsa-announce/2011-December/msg00036.html\");\n script_id(870715);\n script_version(\"$Revision: 8313 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-01-08 08:02:11 +0100 (Mon, 08 Jan 2018) $\");\n script_tag(name:\"creation_date\", value:\"2012-07-09 10:52:46 +0530 (Mon, 09 Jul 2012)\");\n script_cve_id(\"CVE-2011-4339\");\n script_tag(name:\"cvss_base\", value:\"3.6\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_xref(name: \"RHSA\", value: \"2011:1814-01\");\n script_name(\"RedHat Update for ipmitool RHSA-2011:1814-01\");\n\n script_tag(name: \"summary\" , value: \"Check for the Version of ipmitool\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2012 Greenbone Networks GmbH\");\n script_family(\"Red Hat Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/rhel\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"RHENT_6\")\n{\n\n if ((res = isrpmvuln(pkg:\"ipmitool\", rpm:\"ipmitool~1.8.11~12.el6_2.1\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"ipmitool-debuginfo\", rpm:\"ipmitool-debuginfo~1.8.11~12.el6_2.1\", rls:\"RHENT_6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 3.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2019-05-29T18:39:12", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "description": "The remote host is missing an update for the ", "modified": "2019-03-15T00:00:00", "published": "2012-07-30T00:00:00", "id": "OPENVAS:1361412562310881362", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310881362", "type": "openvas", "title": "CentOS Update for ipmitool CESA-2011:1814 centos6", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# CentOS Update for ipmitool CESA-2011:1814 centos6\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2012 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_xref(name:\"URL\", value:\"http://lists.centos.org/pipermail/centos-announce/2011-December/018341.html\");\n script_oid(\"1.3.6.1.4.1.25623.1.0.881362\");\n script_version(\"$Revision: 14222 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 13:50:48 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2012-07-30 17:35:37 +0530 (Mon, 30 Jul 2012)\");\n script_cve_id(\"CVE-2011-4339\");\n script_tag(name:\"cvss_base\", value:\"3.6\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_xref(name:\"CESA\", value:\"2011:1814\");\n script_name(\"CentOS Update for ipmitool CESA-2011:1814 centos6\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'ipmitool'\n package(s) announced via the referenced advisory.\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2012 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\", re:\"ssh/login/release=CentOS6\");\n script_tag(name:\"affected\", value:\"ipmitool on CentOS 6\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n script_tag(name:\"insight\", value:\"The ipmitool package contains a command line utility for interfacing with\n devices that support the Intelligent Platform Management Interface (IPMI)\n specification. IPMI is an open standard for machine health, inventory, and\n remote power control.\n\n It was discovered that the IPMI event daemon (ipmievd) created its process\n ID (PID) file with world-writable permissions. A local user could use this\n flaw to make the ipmievd init script kill an arbitrary process when the\n ipmievd daemon is stopped or restarted. (CVE-2011-4339)\n\n All users of ipmitool are advised to upgrade to this updated package, which\n contains a backported patch to correct this issue. After installing this\n update, the IPMI event daemon (ipmievd) will be restarted automatically.\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"CentOS6\")\n{\n\n if ((res = isrpmvuln(pkg:\"ipmitool\", rpm:\"ipmitool~1.8.11~12.el6_2.1\", rls:\"CentOS6\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2018-01-11T11:07:33", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "description": "Check for the Version of ipmitool", "modified": "2018-01-10T00:00:00", "published": "2012-04-02T00:00:00", "id": "OPENVAS:863890", "href": "http://plugins.openvas.org/nasl.php?oid=863890", "type": "openvas", "title": "Fedora Update for ipmitool FEDORA-2011-17065", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Fedora Update for ipmitool FEDORA-2011-17065\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2012 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"This package contains a utility for interfacing with devices that support\n the Intelligent Platform Management Interface specification. IPMI is\n an open standard for machine health, inventory, and remote power control.\n\n This utility can communicate with IPMI-enabled devices through either a\n kernel driver such as OpenIPMI or over the RMCP LAN protocol defined in\n the IPMI specification. IPMIv2 adds support for encrypted LAN\n communications and remote Serial-over-LAN functionality.\n\n It provides commands for reading the Sensor Data Repository (SDR) and\n displaying sensor values, displaying the contents of the System Event\n Log (SEL), printing Field Replaceable Unit (FRU) information, reading and\n setting LAN configuration, and chassis power control.\";\n\ntag_affected = \"ipmitool on Fedora 16\";\ntag_solution = \"Please Install the Updated Packages.\";\n\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071580.html\");\n script_id(863890);\n script_version(\"$Revision: 8352 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-01-10 08:01:57 +0100 (Wed, 10 Jan 2018) $\");\n script_tag(name:\"creation_date\", value:\"2012-04-02 12:30:08 +0530 (Mon, 02 Apr 2012)\");\n script_cve_id(\"CVE-2011-4339\");\n script_tag(name:\"cvss_base\", value:\"3.6\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_xref(name: \"FEDORA\", value: \"2011-17065\");\n script_name(\"Fedora Update for ipmitool FEDORA-2011-17065\");\n\n script_tag(name: \"summary\" , value: \"Check for the Version of ipmitool\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2012 Greenbone Networks GmbH\");\n script_family(\"Fedora Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/fedora\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"FC16\")\n{\n\n if ((res = isrpmvuln(pkg:\"ipmitool\", rpm:\"ipmitool~1.8.11~8.fc16\", rls:\"FC16\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 3.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-07-24T12:50:35", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "description": "The remote host is missing an update to ipmitool\nannounced via advisory DSA 2376-2.", "modified": "2017-07-07T00:00:00", "published": "2012-02-11T00:00:00", "id": "OPENVAS:70695", "href": "http://plugins.openvas.org/nasl.php?oid=70695", "type": "openvas", "title": "Debian Security Advisory DSA 2376-2 (ipmitool)", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: deb_2376_2.nasl 6612 2017-07-07 12:08:03Z cfischer $\n# Description: Auto-generated from advisory DSA 2376-2 (ipmitool)\n#\n# Authors:\n# Thomas Reinke <reinke@securityspace.com>\n#\n# Copyright:\n# Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2,\n# or at your option, GNU General Public License version 3,\n# as published by the Free Software Foundation\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"It was discovered that OpenIPMI, the Intelligent Platform Management\nInterface library and tools, used too wide permissions PID file,\nwhich allows local users to kill arbitrary processes by writing to\nthis file.\n\nThe original announcement didn't contain corrections for the Debian\n5.0 lenny distribution. This update adds packages for lenny.\n\nFor the oldstable distribution (lenny), this problem has been fixed in\nversion 1.8.9-2+squeeze1. (Although the version number contains the\nstring squeeze, this is in fact an update for lenny.)\n\nFor the stable distribution (squeeze), this problem has been fixed in\nversion 1.8.11-2+squeeze2.\n\nFor the unstable distribution (sid), this problem has been fixed in\nversion 1.8.11-5.\n\nWe recommend that you upgrade your ipmitool packages.\";\ntag_summary = \"The remote host is missing an update to ipmitool\nannounced via advisory DSA 2376-2.\";\n\ntag_solution = \"https://secure1.securityspace.com/smysecure/catid.html?in=DSA%202376-2\";\n\nif(description)\n{\n script_id(70695);\n script_tag(name:\"cvss_base\", value:\"3.6\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_cve_id(\"CVE-2011-4339\");\n script_version(\"$Revision: 6612 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-07-07 14:08:03 +0200 (Fri, 07 Jul 2017) $\");\n script_tag(name:\"creation_date\", value:\"2012-02-11 03:22:50 -0500 (Sat, 11 Feb 2012)\");\n script_name(\"Debian Security Advisory DSA 2376-2 (ipmitool)\");\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\");\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"summary\" , value : tag_summary);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n#\n# The script code starts here\n#\n\ninclude(\"pkg-lib-deb.inc\");\nres = \"\";\nreport = \"\";\nif((res = isdpkgvuln(pkg:\"ipmitool\", ver:\"1.8.9-2+squeeze1\", rls:\"DEB5.0\")) != NULL) {\n report += res;\n}\nif((res = isdpkgvuln(pkg:\"ipmitool\", ver:\"1.8.11-2+squeeze2\", rls:\"DEB6.0\")) != NULL) {\n report += res;\n}\n\nif(report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 3.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:PARTIAL/"}}], "centos": [{"lastseen": "2019-12-20T18:28:04", "bulletinFamily": "unix", "cvelist": ["CVE-2011-4339"], "description": "**CentOS Errata and Security Advisory** CESA-2011:1814\n\n\nThe ipmitool package contains a command line utility for interfacing with\ndevices that support the Intelligent Platform Management Interface (IPMI)\nspecification. IPMI is an open standard for machine health, inventory, and\nremote power control.\n\nIt was discovered that the IPMI event daemon (ipmievd) created its process\nID (PID) file with world-writable permissions. A local user could use this\nflaw to make the ipmievd init script kill an arbitrary process when the\nipmievd daemon is stopped or restarted. (CVE-2011-4339)\n\nAll users of ipmitool are advised to upgrade to this updated package, which\ncontains a backported patch to correct this issue. After installing this\nupdate, the IPMI event daemon (ipmievd) will be restarted automatically.\n\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2011-December/030379.html\n\n**Affected packages:**\nipmitool\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2011-1814.html", "edition": 3, "modified": "2011-12-22T15:45:57", "published": "2011-12-22T15:45:57", "href": "http://lists.centos.org/pipermail/centos-announce/2011-December/030379.html", "id": "CESA-2011:1814", "title": "ipmitool security update", "type": "centos", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}], "oraclelinux": [{"lastseen": "2019-05-29T18:34:14", "bulletinFamily": "unix", "cvelist": ["CVE-2011-4339"], "description": "[1.8.11-12.1]\n- fixed wrong permissions on ipmievd.pid (#756684)", "edition": 4, "modified": "2011-12-16T00:00:00", "published": "2011-12-16T00:00:00", "id": "ELSA-2011-1814", "href": "http://linux.oracle.com/errata/ELSA-2011-1814.html", "title": "ipmitool security update", "type": "oraclelinux", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2019-05-29T18:34:37", "bulletinFamily": "unix", "cvelist": ["CVE-2011-4339"], "description": "[2.0.16-16.el5]\r\n- ipmitool: fix ipmi command retry shifts replies (#863310)\r\n \n[2.0.16-15.el5]\r\n- ipmitool: added -b, -B, -l and -T options to ipmitool man page\r\n (#846596)\r\n- ipmitool: fixed man page documentation for delloem setled command\r\n (#797050)\r\n \n[2.0.16-14.el5]\r\n- ipmitool: fixed wrong permissions on ipmievd.pid (#834190)\r\n \n[2.0.16-13.el5]\r\n- ipmitool: updated delloem commands (#797050)\r\n- ipmitool: fixed exit code of 'ipmitool -o list' command (#740780)\r\n- ipmitool: disabled automatic bridging of SDR readings to IPMB\r\n in verbose mode (#749796)\r\n- ipmitool: fixed reporting of usage of various delloem subcommands\r\n (#658762)\r\n- added path to /sbin to lsmod and modprobe (#829705)", "edition": 4, "modified": "2013-01-11T00:00:00", "published": "2013-01-11T00:00:00", "id": "ELSA-2013-0123", "href": "http://linux.oracle.com/errata/ELSA-2013-0123.html", "title": "OpenIPMI security, bug fix, and enhancement update", "type": "oraclelinux", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}], "securityvulns": [{"lastseen": "2018-08-31T11:10:43", "bulletinFamily": "software", "cvelist": ["CVE-2011-4339"], "description": "-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\n- -------------------------------------------------------------------------\r\nDebian Security Advisory DSA-2376-2 security@debian.org\r\nhttp://www.debian.org/security/ Thijs Kinkhorst\r\nDecember 31, 2011 http://www.debian.org/security/faq\r\n- -------------------------------------------------------------------------\r\n\r\nPackage : ipmitool\r\nVulnerability : insecure pid file\r\nProblem type : local\r\nDebian-specific: no\r\nCVE ID : CVE-2011-4339\r\nDebian Bug : 651917\r\n\r\nIt was discovered that OpenIPMI, the Intelligent Platform Management\r\nInterface library and tools, used too wide permissions PID file,\r\nwhich allows local users to kill arbitrary processes by writing to\r\nthis file.\r\n\r\nThe original announcement didn't contain corrections for the Debian\r\n5.0 "lenny" distribution. This update adds packages for lenny.\r\n\r\nFor the oldstable distribution (lenny), this problem has been fixed in\r\nversion 1.8.9-2+squeeze1. (Although the version number contains the\r\nstring "squeeze", this is in fact an update for lenny.)\r\n\r\nFor the stable distribution (squeeze), this problem has been fixed in\r\nversion 1.8.11-2+squeeze2.\r\n\r\nFor the unstable distribution (sid), this problem has been fixed in\r\nversion 1.8.11-5.\r\n\r\nWe recommend that you upgrade your ipmitool packages.\r\n\r\nFurther information about Debian Security Advisories, how to apply\r\nthese updates to your system and frequently asked questions can be\r\nfound at: http://www.debian.org/security/\r\n\r\nMailing list: debian-security-announce@lists.debian.org\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.10 (GNU/Linux)\r\n\r\niQEcBAEBAgAGBQJO/v4FAAoJEOxfUAG2iX57ZxIH/3VOGKFEqkiYJyAeB96EA9d1\r\nQKwRWxJmc+gsCB4cruNUWihCZpvgUVYHY7sRUqC+z5q5CidCehT6MRc+aBtbq0CI\r\nmroBMkTfMl135wYXtEabThDx/gHY+gKgzkqnalPEDAAsY6hMi3YGHeB7VXFClH/c\r\nmManIlimI9qbvBM/FvLCx0e43oBzNgdgbyhZpZO22CugMXwGQjZNfvAE+hfW2n25\r\nfScxAtJTKcg9Wp2buuE7HYvn0dh9m/y8uw/mFwIYr7DLvwWRAcA+NdvCY4o863KT\r\n0eJuPtK685CLFRwKGBKzuBflUBtb7fTpg2hW4GhhHQUF0aHz6Vz0Cpgf715I/bA=\r\n=xZPT\r\n-----END PGP SIGNATURE-----\r\n", "edition": 1, "modified": "2012-01-09T00:00:00", "published": "2012-01-09T00:00:00", "id": "SECURITYVULNS:DOC:27540", "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:27540", "title": "[SECURITY] [DSA 2376-2] ipmitool security update", "type": "securityvulns", "cvss": {"score": 3.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2018-08-31T11:09:45", "bulletinFamily": "software", "cvelist": ["CVE-2011-4339"], "description": "Weak permissions on pid file creation.", "edition": 1, "modified": "2012-01-09T00:00:00", "published": "2012-01-09T00:00:00", "id": "SECURITYVULNS:VULN:12135", "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:12135", "title": "ipmitool weak permissions", "type": "securityvulns", "cvss": {"score": 3.6, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:PARTIAL/A:PARTIAL/"}}], "debian": [{"lastseen": "2019-05-30T02:21:20", "bulletinFamily": "unix", "cvelist": ["CVE-2011-4339"], "description": "- -------------------------------------------------------------------------\nDebian Security Advisory DSA-2376-1 security@debian.org\nhttp://www.debian.org/security/ Thijs Kinkhorst\nDecember 30, 2011 http://www.debian.org/security/faq\n- -------------------------------------------------------------------------\n\nPackage : ipmitool\nVulnerability : insecure pid file\nProblem type : local\nDebian-specific: no\nCVE ID : CVE-2011-4339\nDebian Bug : 651917\n\nIt was discovered that OpenIPMI, the Intelligent Platform Management\nInterface library and tools, used too wide permissions PID file,\nwhich allows local users to kill arbitrary processes by writing to\nthis file.\n\nFor the stable distribution (squeeze), this problem has been fixed in\nversion 1.8.11-2+squeeze2.\n\nFor the unstable distribution (sid), this problem has been fixed in\nversion 1.8.11-5.\n\nWe recommend that you upgrade your ipmitool packages.\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: http://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n", "edition": 2, "modified": "2011-12-30T07:27:01", "published": "2011-12-30T07:27:01", "id": "DEBIAN:DSA-2376-1:2E29C", "href": "https://lists.debian.org/debian-security-announce/debian-security-announce-2011/msg00255.html", "title": "[SECURITY] [DSA 2376-1] ipmitool security update", "type": "debian", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2020-08-12T01:03:10", "bulletinFamily": "unix", "cvelist": ["CVE-2011-4339"], "description": "- -------------------------------------------------------------------------\nDebian Security Advisory DSA-2376-2 security@debian.org\nhttp://www.debian.org/security/ Thijs Kinkhorst\nDecember 31, 2011 http://www.debian.org/security/faq\n- -------------------------------------------------------------------------\n\nPackage : ipmitool\nVulnerability : insecure pid file\nProblem type : local\nDebian-specific: no\nCVE ID : CVE-2011-4339\nDebian Bug : 651917\n\nIt was discovered that OpenIPMI, the Intelligent Platform Management\nInterface library and tools, used too wide permissions PID file,\nwhich allows local users to kill arbitrary processes by writing to\nthis file.\n\nThe original announcement didn't contain corrections for the Debian\n5.0 "lenny" distribution. This update adds packages for lenny.\n\nFor the oldstable distribution (lenny), this problem has been fixed in\nversion 1.8.9-2+squeeze1. (Although the version number contains the\nstring "squeeze", this is in fact an update for lenny.)\n\nFor the stable distribution (squeeze), this problem has been fixed in\nversion 1.8.11-2+squeeze2.\n\nFor the unstable distribution (sid), this problem has been fixed in\nversion 1.8.11-5.\n\nWe recommend that you upgrade your ipmitool packages.\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: http://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n", "edition": 6, "modified": "2011-12-31T12:22:03", "published": "2011-12-31T12:22:03", "id": "DEBIAN:DSA-2376-2:DC490", "href": "https://lists.debian.org/debian-security-announce/debian-security-announce-2011/msg00257.html", "title": "[SECURITY] [DSA 2376-2] ipmitool security update", "type": "debian", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}], "redhat": [{"lastseen": "2019-08-13T18:46:44", "bulletinFamily": "unix", "cvelist": ["CVE-2011-4339"], "description": "The ipmitool package contains a command line utility for interfacing with\ndevices that support the Intelligent Platform Management Interface (IPMI)\nspecification. IPMI is an open standard for machine health, inventory, and\nremote power control.\n\nIt was discovered that the IPMI event daemon (ipmievd) created its process\nID (PID) file with world-writable permissions. A local user could use this\nflaw to make the ipmievd init script kill an arbitrary process when the\nipmievd daemon is stopped or restarted. (CVE-2011-4339)\n\nAll users of ipmitool are advised to upgrade to this updated package, which\ncontains a backported patch to correct this issue. After installing this\nupdate, the IPMI event daemon (ipmievd) will be restarted automatically.\n", "modified": "2018-06-06T20:24:23", "published": "2011-12-13T05:00:00", "id": "RHSA-2011:1814", "href": "https://access.redhat.com/errata/RHSA-2011:1814", "type": "redhat", "title": "(RHSA-2011:1814) Moderate: ipmitool security update", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2019-08-13T18:45:14", "bulletinFamily": "unix", "cvelist": ["CVE-2011-4339"], "description": "The OpenIPMI packages provide command line tools and utilities to access\nplatform information using Intelligent Platform Management Interface\n(IPMI). System administrators can use OpenIPMI to manage systems and to\nperform system health monitoring.\n\nIt was discovered that the IPMI event daemon (ipmievd) created its process\nID (PID) file with world-writable permissions. A local user could use this\nflaw to make the ipmievd init script kill an arbitrary process when the\nipmievd daemon is stopped or restarted. (CVE-2011-4339)\n\nNote: This issue did not affect the default configuration of OpenIPMI as\nshipped with Red Hat Enterprise Linux 5.\n\nThis update also fixes the following bugs:\n\n* Prior to this update, the ipmitool utility first checked the IPMI\nhardware for Dell IPMI extensions and listed only supported commands when\nprinting command usage like the option \"ipmtool delloem help\". On a\nnon-Dell platform, the usage text was incomplete and misleading. This\nupdate lists all Dell OEM extensions in usage texts on all platforms, which\nallows users to check for command line arguments on non-Dell hardware.\n(BZ#658762)\n\n* Prior to this update, the ipmitool utility tried to retrieve the Sensor\nData Records (SDR) from the IPMI bus instead of the Baseboard Management\nController (BMC) bus when IPMI-enabled devices reported SDR under a\ndifferent owner than the BMC. As a consequence, the timeout setting for the\nSDR read attempt could significantly decrease the performance and no sensor\ndata was shown. This update modifies ipmitool to read these SDR records\nfrom the BMC and shows the correct sensor data on these platforms.\n(BZ#671059, BZ#749796)\n\n* Prior to this update, the exit code of the \"ipmitool -o list\" option was\nnot set correctly. As a consequence, \"ipmitool -o list\" always returned the\nvalue 1 instead of the expected value 0. This update modifies the\nunderlying code to return the value 0 as expected. (BZ#740780)\n\n* Prior to this update, the \"ipmi\" service init script did not specify the\nfull path to the \"/sbin/lsmod\" and \"/sbin/modprobe\" system utilities. As a\nconsequence, the init script failed when it was executed if PATH did not\npoint to /sbin, for example, when running \"sudo /etc/init.d/ipmi\". This\nupdate modifies the init script so that it now contains the full path to\nlsmod and modrpobe. Now, it can be executed with sudo. (BZ#829705)\n\n* Prior to this update, the ipmitool man page did not list the \"-b\", \"-B\",\n\"-l\" and \"-T\" options. In this update, these options are documented in the\nipmitool man page. (BZ#846596)\n\nThis update also adds the following enhancement:\n\n* Updates to the Dell-specific IPMI extension: A new vFlash command, which\nallows users to display information about extended SD cards; a new setled\ncommand, which allows users to display the backplane LED status; improved\nerror descriptions; added support for new hardware; and updated\ndocumentation of the ipmitool delloem commands in the ipmitool manual\npage. (BZ#797050)\n\nAll users of OpenIPMI are advised to upgrade to these updated packages,\nwhich contain backported patches to correct these issues and add this\nenhancement.\n", "modified": "2017-09-08T12:17:14", "published": "2013-01-08T05:00:00", "id": "RHSA-2013:0123", "href": "https://access.redhat.com/errata/RHSA-2013:0123", "type": "redhat", "title": "(RHSA-2013:0123) Low: OpenIPMI security, bug fix, and enhancement update", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2019-08-13T18:47:09", "bulletinFamily": "unix", "cvelist": ["CVE-2011-1530", "CVE-2011-4127", "CVE-2011-4339", "CVE-2011-4539"], "description": "The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization\nHypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor\nis a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes\neverything necessary to run and manage virtual machines: A subset of the\nRed Hat Enterprise Linux operating environment and the Red Hat Enterprise\nVirtualization Agent.\n\nNote: Red Hat Enterprise Virtualization Hypervisor is only available for\nthe Intel 64 and AMD64 architectures with virtualization extensions.\n\nUsing the SG_IO IOCTL to issue SCSI requests to partitions or LVM volumes\nresulted in the requests being passed to the underlying block device. If a\nprivileged user only had access to a single partition or LVM volume, they\ncould use this flaw to bypass those restrictions and gain read and write\naccess (and be able to issue other SCSI commands) to the entire block\ndevice.\n\nIn KVM (Kernel-based Virtual Machine) environments using raw format virtio\ndisks backed by a partition or LVM volume, a privileged guest user could\nbypass intended restrictions and issue read and write requests (and other\nSCSI commands) on the host, and possibly access the data of other guests\nthat reside on the same underlying block device. Refer to Red Hat Bugzilla\nbug 752375 for further details and a mitigation script for users who cannot\napply this update immediately. (CVE-2011-4127)\n\nThis updated package provides updated components that include fixes for\nvarious security issues. These issues have no security impact on Red Hat\nEnterprise Virtualization Hypervisor itself, however. The security fixes\nincluded in this update address the following CVE numbers:\n\nCVE-2011-4539 (dhcp issue)\n\nCVE-2011-4339 (ipmitool issue)\n\nCVE-2011-1530 (krb5 issue)\n\nThis update also fixes the following bugs:\n\n* Virtual LAN (VLAN) identifiers containing a space were accepted, even\nthough they could not be configured correctly. With this update, VLAN\nidentifiers containing a space are rejected with an \"Invalid VLAN ID\"\nmessage. (BZ#761537)\n\n* After configuring netconsole, it was not possible to start the service:\nthe \"service netconsole start\" command failed with a warning that\nconfigfs.ko could not be found, and a fatal error that netconsole.ko could\nnot be inserted. With this update, the netconsole service starts as\nexpected. Note that after netconsole is configured, the service will not\nautomatically start, even after rebooting. The service must be manually\nstarted. (BZ#765898)\n\nUsers of the Red Hat Enterprise Virtualization Hypervisor are advised to\nupgrade to this updated package, which corrects these issues.\n", "modified": "2018-06-07T08:59:43", "published": "2011-12-22T05:00:00", "id": "RHSA-2011:1850", "href": "https://access.redhat.com/errata/RHSA-2011:1850", "type": "redhat", "title": "(RHSA-2011:1850) Important: rhev-hypervisor6 security and bug fix update", "cvss": {"score": 6.8, "vector": "AV:N/AC:L/Au:S/C:N/I:N/A:C"}}], "fedora": [{"lastseen": "2020-12-21T08:17:50", "bulletinFamily": "unix", "cvelist": ["CVE-2011-4339"], "description": "This package contains a utility for interfacing with devices that support the Intelligent Platform Management Interface specification. IPMI is an open standard for machine health, inventory, and remote power control. This utility can communicate with IPMI-enabled devices through either a kernel driver such as OpenIPMI or over the RMCP LAN protocol defined in the IPMI specification. IPMIv2 adds support for encrypted LAN communications and remote Serial-over-LAN functionality. It provides commands for reading the Sensor Data Repository (SDR) and displaying sensor values, displaying the contents of the System Event Log (SEL), printing Field Replaceable Unit (FRU) information, reading and setting LAN configuration, and chassis power control. ", "modified": "2012-01-02T21:56:34", "published": "2012-01-02T21:56:34", "id": "FEDORA:EDAAE21010", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 16 Update: ipmitool-1.8.11-8.fc16", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2020-12-21T08:17:50", "bulletinFamily": "unix", "cvelist": ["CVE-2011-4339"], "description": "This package contains a utility for interfacing with devices that support the Intelligent Platform Management Interface specification. IPMI is an open standard for machine health, inventory, and remote power control. This utility can communicate with IPMI-enabled devices through either a kernel driver such as OpenIPMI or over the RMCP LAN protocol defined in the IPMI specification. IPMIv2 adds support for encrypted LAN communications and remote Serial-over-LAN functionality. It provides commands for reading the Sensor Data Repository (SDR) and displaying sensor values, displaying the contents of the System Event Log (SEL), printing Field Replaceable Unit (FRU) information, reading and setting LAN configuration, and chassis power control. ", "modified": "2012-01-02T21:56:00", "published": "2012-01-02T21:56:00", "id": "FEDORA:9443C20E72", "href": "", "type": "fedora", "title": "[SECURITY] Fedora 15 Update: ipmitool-1.8.11-7.fc15", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}], "nessus": [{"lastseen": "2021-01-06T09:28:18", "description": "Updated OpenIPMI packages that fix one security issue, multiple bugs,\nand add one enhancement are now available for Red Hat Enterprise Linux\n5.\n\nThe Red Hat Security Response Team has rated this update as having low\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available from the\nCVE link in the References section.\n\nThe OpenIPMI packages provide command line tools and utilities to\naccess platform information using Intelligent Platform Management\nInterface (IPMI). System administrators can use OpenIPMI to manage\nsystems and to perform system health monitoring.\n\nIt was discovered that the IPMI event daemon (ipmievd) created its\nprocess ID (PID) file with world-writable permissions. A local user\ncould use this flaw to make the ipmievd init script kill an arbitrary\nprocess when the ipmievd daemon is stopped or restarted.\n(CVE-2011-4339)\n\nNote: This issue did not affect the default configuration of OpenIPMI\nas shipped with Red Hat Enterprise Linux 5.\n\nThis update also fixes the following bugs :\n\n* Prior to this update, the ipmitool utility first checked the IPMI\nhardware for Dell IPMI extensions and listed only supported commands\nwhen printing command usage like the option 'ipmtool delloem help'. On\na non-Dell platform, the usage text was incomplete and misleading.\nThis update lists all Dell OEM extensions in usage texts on all\nplatforms, which allows users to check for command line arguments on\nnon-Dell hardware. (BZ#658762)\n\n* Prior to this update, the ipmitool utility tried to retrieve the\nSensor Data Records (SDR) from the IPMI bus instead of the Baseboard\nManagement Controller (BMC) bus when IPMI-enabled devices reported SDR\nunder a different owner than the BMC. As a consequence, the timeout\nsetting for the SDR read attempt could significantly decrease the\nperformance and no sensor data was shown. This update modifies\nipmitool to read these SDR records from the BMC and shows the correct\nsensor data on these platforms. (BZ#671059, BZ#749796)\n\n* Prior to this update, the exit code of the 'ipmitool -o list' option\nwas not set correctly. As a consequence, 'ipmitool -o list' always\nreturned the value 1 instead of the expected value 0. This update\nmodifies the underlying code to return the value 0 as expected.\n(BZ#740780)\n\n* Prior to this update, the 'ipmi' service init script did not specify\nthe full path to the '/sbin/lsmod' and '/sbin/modprobe' system\nutilities. As a consequence, the init script failed when it was\nexecuted if PATH did not point to /sbin, for example, when running\n'sudo /etc/init.d/ipmi'. This update modifies the init script so that\nit now contains the full path to lsmod and modrpobe. Now, it can be\nexecuted with sudo. (BZ#829705)\n\n* Prior to this update, the ipmitool man page did not list the '-b',\n'-B', '-l' and '-T' options. In this update, these options are\ndocumented in the ipmitool man page. (BZ#846596)\n\nThis update also adds the following enhancement :\n\n* Updates to the Dell-specific IPMI extension: A new vFlash command,\nwhich allows users to display information about extended SD cards; a\nnew setled command, which allows users to display the backplane LED\nstatus; improved error descriptions; added support for new hardware;\nand updated documentation of the ipmitool delloem commands in the\nipmitool manual page. (BZ#797050)\n\nAll users of OpenIPMI are advised to upgrade to these updated\npackages, which contain backported patches to correct these issues and\nadd this enhancement.", "edition": 25, "published": "2013-01-17T00:00:00", "title": "CentOS 5 : OpenIPMI (CESA-2013:0123)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "modified": "2013-01-17T00:00:00", "cpe": ["p-cpe:/a:centos:centos:OpenIPMI-perl", "p-cpe:/a:centos:centos:OpenIPMI-libs", "p-cpe:/a:centos:centos:OpenIPMI", "p-cpe:/a:centos:centos:OpenIPMI-python", "p-cpe:/a:centos:centos:OpenIPMI-devel", "cpe:/o:centos:centos:5", "p-cpe:/a:centos:centos:OpenIPMI-tools", "p-cpe:/a:centos:centos:OpenIPMI-gui"], "id": "CENTOS_RHSA-2013-0123.NASL", "href": "https://www.tenable.com/plugins/nessus/63568", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2013:0123 and \n# CentOS Errata and Security Advisory 2013:0123 respectively.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(63568);\n script_version(\"1.12\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/04\");\n\n script_cve_id(\"CVE-2011-4339\");\n script_bugtraq_id(51036);\n script_xref(name:\"RHSA\", value:\"2013:0123\");\n\n script_name(english:\"CentOS 5 : OpenIPMI (CESA-2013:0123)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote CentOS host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated OpenIPMI packages that fix one security issue, multiple bugs,\nand add one enhancement are now available for Red Hat Enterprise Linux\n5.\n\nThe Red Hat Security Response Team has rated this update as having low\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available from the\nCVE link in the References section.\n\nThe OpenIPMI packages provide command line tools and utilities to\naccess platform information using Intelligent Platform Management\nInterface (IPMI). System administrators can use OpenIPMI to manage\nsystems and to perform system health monitoring.\n\nIt was discovered that the IPMI event daemon (ipmievd) created its\nprocess ID (PID) file with world-writable permissions. A local user\ncould use this flaw to make the ipmievd init script kill an arbitrary\nprocess when the ipmievd daemon is stopped or restarted.\n(CVE-2011-4339)\n\nNote: This issue did not affect the default configuration of OpenIPMI\nas shipped with Red Hat Enterprise Linux 5.\n\nThis update also fixes the following bugs :\n\n* Prior to this update, the ipmitool utility first checked the IPMI\nhardware for Dell IPMI extensions and listed only supported commands\nwhen printing command usage like the option 'ipmtool delloem help'. On\na non-Dell platform, the usage text was incomplete and misleading.\nThis update lists all Dell OEM extensions in usage texts on all\nplatforms, which allows users to check for command line arguments on\nnon-Dell hardware. (BZ#658762)\n\n* Prior to this update, the ipmitool utility tried to retrieve the\nSensor Data Records (SDR) from the IPMI bus instead of the Baseboard\nManagement Controller (BMC) bus when IPMI-enabled devices reported SDR\nunder a different owner than the BMC. As a consequence, the timeout\nsetting for the SDR read attempt could significantly decrease the\nperformance and no sensor data was shown. This update modifies\nipmitool to read these SDR records from the BMC and shows the correct\nsensor data on these platforms. (BZ#671059, BZ#749796)\n\n* Prior to this update, the exit code of the 'ipmitool -o list' option\nwas not set correctly. As a consequence, 'ipmitool -o list' always\nreturned the value 1 instead of the expected value 0. This update\nmodifies the underlying code to return the value 0 as expected.\n(BZ#740780)\n\n* Prior to this update, the 'ipmi' service init script did not specify\nthe full path to the '/sbin/lsmod' and '/sbin/modprobe' system\nutilities. As a consequence, the init script failed when it was\nexecuted if PATH did not point to /sbin, for example, when running\n'sudo /etc/init.d/ipmi'. This update modifies the init script so that\nit now contains the full path to lsmod and modrpobe. Now, it can be\nexecuted with sudo. (BZ#829705)\n\n* Prior to this update, the ipmitool man page did not list the '-b',\n'-B', '-l' and '-T' options. In this update, these options are\ndocumented in the ipmitool man page. (BZ#846596)\n\nThis update also adds the following enhancement :\n\n* Updates to the Dell-specific IPMI extension: A new vFlash command,\nwhich allows users to display information about extended SD cards; a\nnew setled command, which allows users to display the backplane LED\nstatus; improved error descriptions; added support for new hardware;\nand updated documentation of the ipmitool delloem commands in the\nipmitool manual page. (BZ#797050)\n\nAll users of OpenIPMI are advised to upgrade to these updated\npackages, which contain backported patches to correct these issues and\nadd this enhancement.\"\n );\n # https://lists.centos.org/pipermail/centos-announce/2013-January/019151.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?12a1d38a\"\n );\n # https://lists.centos.org/pipermail/centos-cr-announce/2013-January/000407.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?f1de77de\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected openipmi packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"cvss_score_source\", value:\"CVE-2011-4339\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:OpenIPMI\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:OpenIPMI-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:OpenIPMI-gui\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:OpenIPMI-libs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:OpenIPMI-perl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:OpenIPMI-python\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:OpenIPMI-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:5\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2011/12/15\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2013/01/09\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2013/01/17\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2013-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"CentOS Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/CentOS/release\", \"Host/CentOS/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/CentOS/release\");\nif (isnull(release) || \"CentOS\" >!< release) audit(AUDIT_OS_NOT, \"CentOS\");\nos_ver = pregmatch(pattern: \"CentOS(?: Linux)? release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"CentOS\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^5([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"CentOS 5.x\", \"CentOS \" + os_ver);\n\nif (!get_kb_item(\"Host/CentOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"CentOS\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"CentOS-5\", reference:\"OpenIPMI-2.0.16-16.el5\")) flag++;\nif (rpm_check(release:\"CentOS-5\", reference:\"OpenIPMI-devel-2.0.16-16.el5\")) flag++;\nif (rpm_check(release:\"CentOS-5\", reference:\"OpenIPMI-gui-2.0.16-16.el5\")) flag++;\nif (rpm_check(release:\"CentOS-5\", reference:\"OpenIPMI-libs-2.0.16-16.el5\")) flag++;\nif (rpm_check(release:\"CentOS-5\", reference:\"OpenIPMI-perl-2.0.16-16.el5\")) flag++;\nif (rpm_check(release:\"CentOS-5\", reference:\"OpenIPMI-python-2.0.16-16.el5\")) flag++;\nif (rpm_check(release:\"CentOS-5\", reference:\"OpenIPMI-tools-2.0.16-16.el5\")) flag++;\n\n\nif (flag)\n{\n cr_plugin_caveat = '\\n' +\n 'NOTE: The security advisory associated with this vulnerability has a\\n' +\n 'fixed package version that may only be available in the continuous\\n' +\n 'release (CR) repository for CentOS, until it is present in the next\\n' +\n 'point release of CentOS.\\n\\n' +\n\n 'If an equal or higher package level does not exist in the baseline\\n' +\n 'repository for your major version of CentOS, then updates from the CR\\n' +\n 'repository will need to be applied in order to address the\\n' +\n 'vulnerability.\\n';\n security_report_v4(\n port : 0,\n severity : SECURITY_NOTE,\n extra : rpm_report_get() + cr_plugin_caveat\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"OpenIPMI / OpenIPMI-devel / OpenIPMI-gui / OpenIPMI-libs / etc\");\n}\n", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2021-01-12T10:09:23", "description": "This update fixes following security bug: CVE-2011-4339 - OpenIPMI:\nIPMI event daemon creates PID file with world writeable permissions\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 24, "published": "2012-01-03T00:00:00", "title": "Fedora 15 : ipmitool-1.8.11-7.fc15 (2011-17071)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "modified": "2012-01-03T00:00:00", "cpe": ["p-cpe:/a:fedoraproject:fedora:ipmitool", "cpe:/o:fedoraproject:fedora:15"], "id": "FEDORA_2011-17071.NASL", "href": "https://www.tenable.com/plugins/nessus/57420", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory 2011-17071.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(57420);\n script_version(\"1.10\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2011-4339\");\n script_bugtraq_id(51036);\n script_xref(name:\"FEDORA\", value:\"2011-17071\");\n\n script_name(english:\"Fedora 15 : ipmitool-1.8.11-7.fc15 (2011-17071)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This update fixes following security bug: CVE-2011-4339 - OpenIPMI:\nIPMI event daemon creates PID file with world writeable permissions\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=742837\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2012-January/071575.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?ac5ae0ce\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected ipmitool package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:ND\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:ipmitool\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:15\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2011/12/13\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/01/03\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = eregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^15([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 15.x\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"FC15\", reference:\"ipmitool-1.8.11-7.fc15\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_note(port:0, extra:rpm_report_get());\n else security_note(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"ipmitool\");\n}\n", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2021-01-07T11:53:33", "description": "A vulnerability has been discovered and corrected in ipmitool :\n\nipmievd as used in the ipmitool package uses 0666 permissions for its\nipmievd.pid PID file, which allows local users to kill arbitrary\nprocesses by writing to this file (CVE-2011-4339).\n\nIn Mandriva the ipmievd daemon from the ipmitool package does not have\nan initscript to start and stop the service, however one could rather\neasily craft an initscript or start the service by other means\nrendering the system vulnerable to this issue.\n\nThe updated packages have been patched to correct this issue.", "edition": 25, "published": "2011-12-29T00:00:00", "title": "Mandriva Linux Security Advisory : ipmitool (MDVSA-2011:196)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "modified": "2011-12-29T00:00:00", "cpe": ["cpe:/o:mandriva:linux:2011", "p-cpe:/a:mandriva:linux:ipmitool", "cpe:/o:mandriva:linux:2010.1"], "id": "MANDRIVA_MDVSA-2011-196.NASL", "href": "https://www.tenable.com/plugins/nessus/57413", "sourceData": "#%NASL_MIN_LEVEL 70300\n\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Mandriva Linux Security Advisory MDVSA-2011:196. \n# The text itself is copyright (C) Mandriva S.A.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(57413);\n script_version(\"1.9\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/06\");\n\n script_cve_id(\"CVE-2011-4339\");\n script_bugtraq_id(51036);\n script_xref(name:\"MDVSA\", value:\"2011:196\");\n\n script_name(english:\"Mandriva Linux Security Advisory : ipmitool (MDVSA-2011:196)\");\n script_summary(english:\"Checks rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Mandriva Linux host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"A vulnerability has been discovered and corrected in ipmitool :\n\nipmievd as used in the ipmitool package uses 0666 permissions for its\nipmievd.pid PID file, which allows local users to kill arbitrary\nprocesses by writing to this file (CVE-2011-4339).\n\nIn Mandriva the ipmievd daemon from the ipmitool package does not have\nan initscript to start and stop the service, however one could rather\neasily craft an initscript or start the service by other means\nrendering the system vulnerable to this issue.\n\nThe updated packages have been patched to correct this issue.\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected ipmitool package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:ND\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:ipmitool\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:mandriva:linux:2010.1\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:mandriva:linux:2011\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2011/12/28\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2011/12/29\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2011-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Mandriva Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/Mandrake/release\", \"Host/Mandrake/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Mandrake/release\")) audit(AUDIT_OS_NOT, \"Mandriva / Mandake Linux\");\nif (!get_kb_item(\"Host/Mandrake/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^(amd64|i[3-6]86|x86_64)$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Mandriva / Mandrake Linux\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"MDK2010.1\", reference:\"ipmitool-1.8.11-8.1mdv2010.2\", yank:\"mdv\")) flag++;\n\nif (rpm_check(release:\"MDK2011\", reference:\"ipmitool-1.8.11-8.1-mdv2011.0\", yank:\"mdv\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_note(port:0, extra:rpm_report_get());\n else security_note(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2021-01-12T09:47:11", "description": "It was discovered that OpenIPMI, the Intelligent Platform Management\nInterface library and tools, used too wide permissions PID file, which\nallows local users to kill arbitrary processes by writing to this\nfile.", "edition": 16, "published": "2012-01-12T00:00:00", "title": "Debian DSA-2376-2 : ipmitool - insecure PID file", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "modified": "2012-01-12T00:00:00", "cpe": ["cpe:/o:debian:debian_linux:6.0", "cpe:/o:debian:debian_linux:5.0", "p-cpe:/a:debian:debian_linux:ipmitool"], "id": "DEBIAN_DSA-2376.NASL", "href": "https://www.tenable.com/plugins/nessus/57516", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Debian Security Advisory DSA-2376. The text \n# itself is copyright (C) Software in the Public Interest, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(57516);\n script_version(\"1.10\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2011-4339\");\n script_bugtraq_id(51036);\n script_xref(name:\"DSA\", value:\"2376\");\n\n script_name(english:\"Debian DSA-2376-2 : ipmitool - insecure PID file\");\n script_summary(english:\"Checks dpkg output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Debian host is missing a security-related update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"It was discovered that OpenIPMI, the Intelligent Platform Management\nInterface library and tools, used too wide permissions PID file, which\nallows local users to kill arbitrary processes by writing to this\nfile.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=651917\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://packages.debian.org/source/squeeze/ipmitool\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.debian.org/security/2011/dsa-2376\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Upgrade the ipmitool packages.\n\nFor the oldstable distribution (lenny), this problem has been fixed in\nversion 1.8.9-2+squeeze1. (Although the version number contains the\nstring 'squeeze', this is in fact an update for lenny.)\n\nFor the stable distribution (squeeze), this problem has been fixed in\nversion 1.8.11-2+squeeze2.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:ipmitool\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:5.0\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:6.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2011/12/30\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/01/12\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Debian Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Debian/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"debian_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Debian/release\")) audit(AUDIT_OS_NOT, \"Debian\");\nif (!get_kb_item(\"Host/Debian/dpkg-l\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (deb_check(release:\"5.0\", prefix:\"ipmitool\", reference:\"1.8.9-2+squeeze1\")) flag++;\nif (deb_check(release:\"6.0\", prefix:\"ipmitool\", reference:\"1.8.11-2+squeeze2\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_note(port:0, extra:deb_report_get());\n else security_note(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2021-01-12T10:09:23", "description": "This update fixes following security bug: CVE-2011-4339 - OpenIPMI:\nIPMI event daemon creates PID file with world writeable permissions\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "edition": 24, "published": "2012-01-03T00:00:00", "title": "Fedora 16 : ipmitool-1.8.11-8.fc16 (2011-17065)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "modified": "2012-01-03T00:00:00", "cpe": ["p-cpe:/a:fedoraproject:fedora:ipmitool", "cpe:/o:fedoraproject:fedora:16"], "id": "FEDORA_2011-17065.NASL", "href": "https://www.tenable.com/plugins/nessus/57419", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory 2011-17065.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(57419);\n script_version(\"1.10\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/11\");\n\n script_cve_id(\"CVE-2011-4339\");\n script_bugtraq_id(51036);\n script_xref(name:\"FEDORA\", value:\"2011-17065\");\n\n script_name(english:\"Fedora 16 : ipmitool-1.8.11-8.fc16 (2011-17065)\");\n script_summary(english:\"Checks rpm output for the updated package.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"This update fixes following security bug: CVE-2011-4339 - OpenIPMI:\nIPMI event daemon creates PID file with world writeable permissions\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=742837\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2012-January/071580.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?4d0c9321\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected ipmitool package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:ND\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:ipmitool\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:16\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2011/12/13\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/01/03\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = eregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^16([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 16.x\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"FC16\", reference:\"ipmitool-1.8.11-8.fc16\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_note(port:0, extra:rpm_report_get());\n else security_note(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"ipmitool\");\n}\n", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2021-01-17T13:47:11", "description": "It was discovered that the IPMI event daemon (ipmievd) created its\nprocess ID (PID) file with world-writable permissions. A local user\ncould use this flaw to make the ipmievd init script kill an arbitrary\nprocess when the ipmievd daemon is stopped or restarted.\n(CVE-2011-4339)\n\nNote: This issue did not affect the default configuration of OpenIPMI\nas shipped with Scientific Linux 5.\n\nThis update also fixes the following bugs :\n\n - Prior to this update, the ipmitool utility first checked\n the IPMI hardware for Dell IPMI extensions and listed\n only supported commands when printing command usage like\n the option 'ipmtool delloem help'. On a non-Dell\n platform, the usage text was incomplete and misleading.\n This update lists all Dell OEM extensions in usage texts\n on all platforms, which allows users to check for\n command line arguments on non-Dell hardware.\n\n - Prior to this update, the ipmitool utility tried to\n retrieve the Sensor Data Records (SDR) from the IPMI bus\n instead of the Baseboard Management Controller (BMC) bus\n when IPMI-enabled devices reported SDR under a different\n owner than the BMC. As a consequence, the timeout\n setting for the SDR read attempt could significantly\n decrease the performance and no sensor data was shown.\n This update modifies ipmitool to read these SDR records\n from the BMC and shows the correct sensor data on these\n platforms.\n\n - Prior to this update, the exit code of the 'ipmitool -o\n list' option was not set correctly. As a consequence,\n 'ipmitool -o list' always returned the value 1 instead\n of the expected value 0. This update modifies the\n underlying code to return the value 0 as expected.\n\n - Prior to this update, the 'ipmi' service init script did\n not specify the full path to the '/sbin/lsmod' and\n '/sbin/modprobe' system utilities. As a consequence, the\n init script failed when it was executed if PATH did not\n point to /sbin, for example, when running 'sudo\n /etc/init.d/ipmi'. This update modifies the init script\n so that it now contains the full path to lsmod and\n modrpobe. Now, it can be executed with sudo.\n\n - Prior to this update, the ipmitool man page did not list\n the '-b', '-B', '-l' and '-T' options. In this update,\n these options are documented in the ipmitool man page.\n\nThis update also adds the following enhancement :\n\n - Updates to the Dell-specific IPMI extension: A new\n vFlash command, which allows users to display\n information about extended SD cards; a new setled\n command, which allows users to display the backplane LED\n status; improved error descriptions; added support for\n new hardware; and updated documentation of the ipmitool\n delloem commands in the ipmitool manual page.", "edition": 15, "published": "2013-01-17T00:00:00", "title": "Scientific Linux Security Update : OpenIPMI on SL5.x i386/x86_64 (20130108)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "modified": "2013-01-17T00:00:00", "cpe": ["p-cpe:/a:fermilab:scientific_linux:OpenIPMI-libs", "p-cpe:/a:fermilab:scientific_linux:OpenIPMI-devel", "p-cpe:/a:fermilab:scientific_linux:OpenIPMI-tools", "p-cpe:/a:fermilab:scientific_linux:OpenIPMI-debuginfo", "p-cpe:/a:fermilab:scientific_linux:OpenIPMI", "p-cpe:/a:fermilab:scientific_linux:OpenIPMI-gui", "x-cpe:/o:fermilab:scientific_linux", "p-cpe:/a:fermilab:scientific_linux:OpenIPMI-python", "p-cpe:/a:fermilab:scientific_linux:OpenIPMI-perl"], "id": "SL_20130108_OPENIPMI_ON_SL5_X.NASL", "href": "https://www.tenable.com/plugins/nessus/63601", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text is (C) Scientific Linux.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(63601);\n script_version(\"1.6\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2011-4339\");\n\n script_name(english:\"Scientific Linux Security Update : OpenIPMI on SL5.x i386/x86_64 (20130108)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Scientific Linux host is missing one or more security\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"It was discovered that the IPMI event daemon (ipmievd) created its\nprocess ID (PID) file with world-writable permissions. A local user\ncould use this flaw to make the ipmievd init script kill an arbitrary\nprocess when the ipmievd daemon is stopped or restarted.\n(CVE-2011-4339)\n\nNote: This issue did not affect the default configuration of OpenIPMI\nas shipped with Scientific Linux 5.\n\nThis update also fixes the following bugs :\n\n - Prior to this update, the ipmitool utility first checked\n the IPMI hardware for Dell IPMI extensions and listed\n only supported commands when printing command usage like\n the option 'ipmtool delloem help'. On a non-Dell\n platform, the usage text was incomplete and misleading.\n This update lists all Dell OEM extensions in usage texts\n on all platforms, which allows users to check for\n command line arguments on non-Dell hardware.\n\n - Prior to this update, the ipmitool utility tried to\n retrieve the Sensor Data Records (SDR) from the IPMI bus\n instead of the Baseboard Management Controller (BMC) bus\n when IPMI-enabled devices reported SDR under a different\n owner than the BMC. As a consequence, the timeout\n setting for the SDR read attempt could significantly\n decrease the performance and no sensor data was shown.\n This update modifies ipmitool to read these SDR records\n from the BMC and shows the correct sensor data on these\n platforms.\n\n - Prior to this update, the exit code of the 'ipmitool -o\n list' option was not set correctly. As a consequence,\n 'ipmitool -o list' always returned the value 1 instead\n of the expected value 0. This update modifies the\n underlying code to return the value 0 as expected.\n\n - Prior to this update, the 'ipmi' service init script did\n not specify the full path to the '/sbin/lsmod' and\n '/sbin/modprobe' system utilities. As a consequence, the\n init script failed when it was executed if PATH did not\n point to /sbin, for example, when running 'sudo\n /etc/init.d/ipmi'. This update modifies the init script\n so that it now contains the full path to lsmod and\n modrpobe. Now, it can be executed with sudo.\n\n - Prior to this update, the ipmitool man page did not list\n the '-b', '-B', '-l' and '-T' options. In this update,\n these options are documented in the ipmitool man page.\n\nThis update also adds the following enhancement :\n\n - Updates to the Dell-specific IPMI extension: A new\n vFlash command, which allows users to display\n information about extended SD cards; a new setled\n command, which allows users to display the backplane LED\n status; improved error descriptions; added support for\n new hardware; and updated documentation of the ipmitool\n delloem commands in the ipmitool manual page.\"\n );\n # https://listserv.fnal.gov/scripts/wa.exe?A2=ind1301&L=scientific-linux-errata&T=0&P=967\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?95af5c43\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:OpenIPMI\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:OpenIPMI-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:OpenIPMI-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:OpenIPMI-gui\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:OpenIPMI-libs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:OpenIPMI-perl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:OpenIPMI-python\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fermilab:scientific_linux:OpenIPMI-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"x-cpe:/o:fermilab:scientific_linux\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2011/12/15\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2013/01/08\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2013/01/17\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2013-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Scientific Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Scientific Linux \" >!< release) audit(AUDIT_HOST_NOT, \"running Scientific Linux\");\nos_ver = pregmatch(pattern: \"Scientific Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Scientific Linux\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^5([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Scientific Linux 5.x\", \"Scientific Linux \" + os_ver);\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu >!< \"x86_64\" && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Scientific Linux\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"SL5\", reference:\"OpenIPMI-2.0.16-16.el5\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"OpenIPMI-debuginfo-2.0.16-16.el5\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"OpenIPMI-devel-2.0.16-16.el5\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"OpenIPMI-gui-2.0.16-16.el5\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"OpenIPMI-libs-2.0.16-16.el5\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"OpenIPMI-perl-2.0.16-16.el5\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"OpenIPMI-python-2.0.16-16.el5\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"OpenIPMI-tools-2.0.16-16.el5\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_NOTE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"OpenIPMI / OpenIPMI-debuginfo / OpenIPMI-devel / OpenIPMI-gui / etc\");\n}\n", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2021-01-17T13:11:41", "description": "Updated OpenIPMI packages that fix one security issue, multiple bugs,\nand add one enhancement are now available for Red Hat Enterprise Linux\n5.\n\nThe Red Hat Security Response Team has rated this update as having low\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available from the\nCVE link in the References section.\n\nThe OpenIPMI packages provide command line tools and utilities to\naccess platform information using Intelligent Platform Management\nInterface (IPMI). System administrators can use OpenIPMI to manage\nsystems and to perform system health monitoring.\n\nIt was discovered that the IPMI event daemon (ipmievd) created its\nprocess ID (PID) file with world-writable permissions. A local user\ncould use this flaw to make the ipmievd init script kill an arbitrary\nprocess when the ipmievd daemon is stopped or restarted.\n(CVE-2011-4339)\n\nNote: This issue did not affect the default configuration of OpenIPMI\nas shipped with Red Hat Enterprise Linux 5.\n\nThis update also fixes the following bugs :\n\n* Prior to this update, the ipmitool utility first checked the IPMI\nhardware for Dell IPMI extensions and listed only supported commands\nwhen printing command usage like the option 'ipmtool delloem help'. On\na non-Dell platform, the usage text was incomplete and misleading.\nThis update lists all Dell OEM extensions in usage texts on all\nplatforms, which allows users to check for command line arguments on\nnon-Dell hardware. (BZ#658762)\n\n* Prior to this update, the ipmitool utility tried to retrieve the\nSensor Data Records (SDR) from the IPMI bus instead of the Baseboard\nManagement Controller (BMC) bus when IPMI-enabled devices reported SDR\nunder a different owner than the BMC. As a consequence, the timeout\nsetting for the SDR read attempt could significantly decrease the\nperformance and no sensor data was shown. This update modifies\nipmitool to read these SDR records from the BMC and shows the correct\nsensor data on these platforms. (BZ#671059, BZ#749796)\n\n* Prior to this update, the exit code of the 'ipmitool -o list' option\nwas not set correctly. As a consequence, 'ipmitool -o list' always\nreturned the value 1 instead of the expected value 0. This update\nmodifies the underlying code to return the value 0 as expected.\n(BZ#740780)\n\n* Prior to this update, the 'ipmi' service init script did not specify\nthe full path to the '/sbin/lsmod' and '/sbin/modprobe' system\nutilities. As a consequence, the init script failed when it was\nexecuted if PATH did not point to /sbin, for example, when running\n'sudo /etc/init.d/ipmi'. This update modifies the init script so that\nit now contains the full path to lsmod and modrpobe. Now, it can be\nexecuted with sudo. (BZ#829705)\n\n* Prior to this update, the ipmitool man page did not list the '-b',\n'-B', '-l' and '-T' options. In this update, these options are\ndocumented in the ipmitool man page. (BZ#846596)\n\nThis update also adds the following enhancement :\n\n* Updates to the Dell-specific IPMI extension: A new vFlash command,\nwhich allows users to display information about extended SD cards; a\nnew setled command, which allows users to display the backplane LED\nstatus; improved error descriptions; added support for new hardware;\nand updated documentation of the ipmitool delloem commands in the\nipmitool manual page. (BZ#797050)\n\nAll users of OpenIPMI are advised to upgrade to these updated\npackages, which contain backported patches to correct these issues and\nadd this enhancement.", "edition": 25, "published": "2013-01-08T00:00:00", "title": "RHEL 5 : OpenIPMI (RHSA-2013:0123)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "modified": "2013-01-08T00:00:00", "cpe": ["cpe:/o:redhat:enterprise_linux:5", "p-cpe:/a:redhat:enterprise_linux:OpenIPMI", "p-cpe:/a:redhat:enterprise_linux:OpenIPMI-tools", "p-cpe:/a:redhat:enterprise_linux:OpenIPMI-debuginfo", "p-cpe:/a:redhat:enterprise_linux:OpenIPMI-gui", "p-cpe:/a:redhat:enterprise_linux:OpenIPMI-python", "p-cpe:/a:redhat:enterprise_linux:OpenIPMI-devel", "p-cpe:/a:redhat:enterprise_linux:OpenIPMI-libs", "p-cpe:/a:redhat:enterprise_linux:OpenIPMI-perl"], "id": "REDHAT-RHSA-2013-0123.NASL", "href": "https://www.tenable.com/plugins/nessus/63406", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2013:0123. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(63406);\n script_version(\"1.19\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2011-4339\");\n script_bugtraq_id(51036);\n script_xref(name:\"RHSA\", value:\"2013:0123\");\n\n script_name(english:\"RHEL 5 : OpenIPMI (RHSA-2013:0123)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated OpenIPMI packages that fix one security issue, multiple bugs,\nand add one enhancement are now available for Red Hat Enterprise Linux\n5.\n\nThe Red Hat Security Response Team has rated this update as having low\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base\nscore, which gives a detailed severity rating, is available from the\nCVE link in the References section.\n\nThe OpenIPMI packages provide command line tools and utilities to\naccess platform information using Intelligent Platform Management\nInterface (IPMI). System administrators can use OpenIPMI to manage\nsystems and to perform system health monitoring.\n\nIt was discovered that the IPMI event daemon (ipmievd) created its\nprocess ID (PID) file with world-writable permissions. A local user\ncould use this flaw to make the ipmievd init script kill an arbitrary\nprocess when the ipmievd daemon is stopped or restarted.\n(CVE-2011-4339)\n\nNote: This issue did not affect the default configuration of OpenIPMI\nas shipped with Red Hat Enterprise Linux 5.\n\nThis update also fixes the following bugs :\n\n* Prior to this update, the ipmitool utility first checked the IPMI\nhardware for Dell IPMI extensions and listed only supported commands\nwhen printing command usage like the option 'ipmtool delloem help'. On\na non-Dell platform, the usage text was incomplete and misleading.\nThis update lists all Dell OEM extensions in usage texts on all\nplatforms, which allows users to check for command line arguments on\nnon-Dell hardware. (BZ#658762)\n\n* Prior to this update, the ipmitool utility tried to retrieve the\nSensor Data Records (SDR) from the IPMI bus instead of the Baseboard\nManagement Controller (BMC) bus when IPMI-enabled devices reported SDR\nunder a different owner than the BMC. As a consequence, the timeout\nsetting for the SDR read attempt could significantly decrease the\nperformance and no sensor data was shown. This update modifies\nipmitool to read these SDR records from the BMC and shows the correct\nsensor data on these platforms. (BZ#671059, BZ#749796)\n\n* Prior to this update, the exit code of the 'ipmitool -o list' option\nwas not set correctly. As a consequence, 'ipmitool -o list' always\nreturned the value 1 instead of the expected value 0. This update\nmodifies the underlying code to return the value 0 as expected.\n(BZ#740780)\n\n* Prior to this update, the 'ipmi' service init script did not specify\nthe full path to the '/sbin/lsmod' and '/sbin/modprobe' system\nutilities. As a consequence, the init script failed when it was\nexecuted if PATH did not point to /sbin, for example, when running\n'sudo /etc/init.d/ipmi'. This update modifies the init script so that\nit now contains the full path to lsmod and modrpobe. Now, it can be\nexecuted with sudo. (BZ#829705)\n\n* Prior to this update, the ipmitool man page did not list the '-b',\n'-B', '-l' and '-T' options. In this update, these options are\ndocumented in the ipmitool man page. (BZ#846596)\n\nThis update also adds the following enhancement :\n\n* Updates to the Dell-specific IPMI extension: A new vFlash command,\nwhich allows users to display information about extended SD cards; a\nnew setled command, which allows users to display the backplane LED\nstatus; improved error descriptions; added support for new hardware;\nand updated documentation of the ipmitool delloem commands in the\nipmitool manual page. (BZ#797050)\n\nAll users of OpenIPMI are advised to upgrade to these updated\npackages, which contain backported patches to correct these issues and\nadd this enhancement.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2013:0123\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2011-4339\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:OpenIPMI\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:OpenIPMI-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:OpenIPMI-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:OpenIPMI-gui\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:OpenIPMI-libs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:OpenIPMI-perl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:OpenIPMI-python\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:OpenIPMI-tools\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:5\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2013/01/08\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2013/01/08\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2013-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = eregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^5([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 5.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2013:0123\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_NOTE,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"OpenIPMI-2.0.16-16.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"OpenIPMI-2.0.16-16.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"OpenIPMI-2.0.16-16.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", reference:\"OpenIPMI-debuginfo-2.0.16-16.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", reference:\"OpenIPMI-devel-2.0.16-16.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"OpenIPMI-gui-2.0.16-16.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"OpenIPMI-gui-2.0.16-16.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"OpenIPMI-gui-2.0.16-16.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", reference:\"OpenIPMI-libs-2.0.16-16.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"OpenIPMI-perl-2.0.16-16.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"OpenIPMI-perl-2.0.16-16.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"OpenIPMI-perl-2.0.16-16.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"OpenIPMI-python-2.0.16-16.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"OpenIPMI-python-2.0.16-16.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"OpenIPMI-python-2.0.16-16.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"i386\", reference:\"OpenIPMI-tools-2.0.16-16.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"s390x\", reference:\"OpenIPMI-tools-2.0.16-16.el5\")) flag++;\n if (rpm_check(release:\"RHEL5\", cpu:\"x86_64\", reference:\"OpenIPMI-tools-2.0.16-16.el5\")) flag++;\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_NOTE,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"OpenIPMI / OpenIPMI-debuginfo / OpenIPMI-devel / OpenIPMI-gui / etc\");\n }\n}\n", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2021-01-17T13:10:09", "description": "An updated ipmitool package that fixes one security issue is now\navailable for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. A Common Vulnerability Scoring System (CVSS)\nbase score, which gives a detailed severity rating, is available from\nthe CVE link in the References section.\n\nThe ipmitool package contains a command line utility for interfacing\nwith devices that support the Intelligent Platform Management\nInterface (IPMI) specification. IPMI is an open standard for machine\nhealth, inventory, and remote power control.\n\nIt was discovered that the IPMI event daemon (ipmievd) created its\nprocess ID (PID) file with world-writable permissions. A local user\ncould use this flaw to make the ipmievd init script kill an arbitrary\nprocess when the ipmievd daemon is stopped or restarted.\n(CVE-2011-4339)\n\nAll users of ipmitool are advised to upgrade to this updated package,\nwhich contains a backported patch to correct this issue. After\ninstalling this update, the IPMI event daemon (ipmievd) will be\nrestarted automatically.", "edition": 27, "published": "2011-12-14T00:00:00", "title": "RHEL 6 : ipmitool (RHSA-2011:1814)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "modified": "2011-12-14T00:00:00", "cpe": ["p-cpe:/a:redhat:enterprise_linux:ipmitool-debuginfo", "p-cpe:/a:redhat:enterprise_linux:ipmitool", "cpe:/o:redhat:enterprise_linux:6.2", "cpe:/o:redhat:enterprise_linux:6"], "id": "REDHAT-RHSA-2011-1814.NASL", "href": "https://www.tenable.com/plugins/nessus/57295", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2011:1814. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(57295);\n script_version(\"1.18\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2011-4339\");\n script_bugtraq_id(51036);\n script_xref(name:\"RHSA\", value:\"2011:1814\");\n\n script_name(english:\"RHEL 6 : ipmitool (RHSA-2011:1814)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"An updated ipmitool package that fixes one security issue is now\navailable for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. A Common Vulnerability Scoring System (CVSS)\nbase score, which gives a detailed severity rating, is available from\nthe CVE link in the References section.\n\nThe ipmitool package contains a command line utility for interfacing\nwith devices that support the Intelligent Platform Management\nInterface (IPMI) specification. IPMI is an open standard for machine\nhealth, inventory, and remote power control.\n\nIt was discovered that the IPMI event daemon (ipmievd) created its\nprocess ID (PID) file with world-writable permissions. A local user\ncould use this flaw to make the ipmievd init script kill an arbitrary\nprocess when the ipmievd daemon is stopped or restarted.\n(CVE-2011-4339)\n\nAll users of ipmitool are advised to upgrade to this updated package,\nwhich contains a backported patch to correct this issue. After\ninstalling this update, the IPMI event daemon (ipmievd) will be\nrestarted automatically.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2011-4339\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2011:1814\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected ipmitool and / or ipmitool-debuginfo packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:ipmitool\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:ipmitool-debuginfo\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:6\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:6.2\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2011/12/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2011/12/13\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2011/12/14\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2011-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = pregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^6([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 6.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2011:1814\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_NOTE,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"ipmitool-1.8.11-12.el6_2.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"s390x\", reference:\"ipmitool-1.8.11-12.el6_2.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"ipmitool-1.8.11-12.el6_2.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"i686\", reference:\"ipmitool-debuginfo-1.8.11-12.el6_2.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"s390x\", reference:\"ipmitool-debuginfo-1.8.11-12.el6_2.1\")) flag++;\n\n if (rpm_check(release:\"RHEL6\", cpu:\"x86_64\", reference:\"ipmitool-debuginfo-1.8.11-12.el6_2.1\")) flag++;\n\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_NOTE,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"ipmitool / ipmitool-debuginfo\");\n }\n}\n", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2021-01-17T14:01:00", "description": "The remote Solaris system is missing necessary patches to address\nsecurity updates :\n\n - ipmievd (aka the IPMI event daemon) in OpenIPMI, as used\n in the ipmitool package 1.8.11 in Red Hat Enterprise\n Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other\n products uses 0666 permissions for its ipmievd.pid PID\n file, which allows local users to kill arbitrary\n processes by writing to this file. (CVE-2011-4339)", "edition": 24, "published": "2015-01-19T00:00:00", "title": "Oracle Solaris Third-Party Patch Update : ipmitool (cve_2011_4339_access_controls)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "modified": "2015-01-19T00:00:00", "cpe": ["p-cpe:/a:oracle:solaris:ipmitool", "cpe:/o:oracle:solaris:11.0"], "id": "SOLARIS11_IPMITOOL_20121120.NASL", "href": "https://www.tenable.com/plugins/nessus/80645", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from the Oracle Third Party software advisories.\n#\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(80645);\n script_version(\"1.3\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2011-4339\");\n\n script_name(english:\"Oracle Solaris Third-Party Patch Update : ipmitool (cve_2011_4339_access_controls)\");\n script_summary(english:\"Check for the 'entire' version.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Solaris system is missing a security patch for third-party\nsoftware.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"The remote Solaris system is missing necessary patches to address\nsecurity updates :\n\n - ipmievd (aka the IPMI event daemon) in OpenIPMI, as used\n in the ipmitool package 1.8.11 in Red Hat Enterprise\n Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other\n products uses 0666 permissions for its ipmievd.pid PID\n file, which allows local users to kill arbitrary\n processes by writing to this file. (CVE-2011-4339)\"\n );\n # https://www.oracle.com/technetwork/topics/security/thirdparty-patch-map-1482893.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?4a913f44\"\n );\n # https://blogs.oracle.com/sunsecurity/cve-2011-4339-access-controls-vulnerability-in-ipmitool\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?bea26972\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Upgrade to Solaris 11/11 SRU 13.4.\");\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:solaris:11.0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:solaris:ipmitool\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2012/11/20\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2015/01/19\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2015-2021 Tenable Network Security, Inc.\");\n script_family(english:\"Solaris Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Solaris11/release\", \"Host/Solaris11/pkg-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"solaris.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/Solaris11/release\");\nif (isnull(release)) audit(AUDIT_OS_NOT, \"Solaris11\");\npkg_list = solaris_pkg_list_leaves();\nif (isnull (pkg_list)) audit(AUDIT_PACKAGE_LIST_MISSING, \"Solaris pkg-list packages\");\n\nif (empty_or_null(egrep(string:pkg_list, pattern:\"^ipmitool$\"))) audit(AUDIT_PACKAGE_NOT_INSTALLED, \"ipmitool\");\n\nflag = 0;\n\nif (solaris_check_release(release:\"0.5.11-0.175.0.13.0.4.0\", sru:\"SRU 13.4\") > 0) flag++;\n\nif (flag)\n{\n error_extra = 'Affected package : ipmitool\\n' + solaris_get_report2();\n error_extra = ereg_replace(pattern:\"version\", replace:\"OS version\", string:error_extra);\n if (report_verbosity > 0) security_note(port:0, extra:error_extra);\n else security_note(0);\n exit(0);\n}\nelse audit(AUDIT_PACKAGE_NOT_AFFECTED, \"ipmitool\");\n", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}, {"lastseen": "2021-01-17T12:46:23", "description": "From Red Hat Security Advisory 2011:1814 :\n\nAn updated ipmitool package that fixes one security issue is now\navailable for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. A Common Vulnerability Scoring System (CVSS)\nbase score, which gives a detailed severity rating, is available from\nthe CVE link in the References section.\n\nThe ipmitool package contains a command line utility for interfacing\nwith devices that support the Intelligent Platform Management\nInterface (IPMI) specification. IPMI is an open standard for machine\nhealth, inventory, and remote power control.\n\nIt was discovered that the IPMI event daemon (ipmievd) created its\nprocess ID (PID) file with world-writable permissions. A local user\ncould use this flaw to make the ipmievd init script kill an arbitrary\nprocess when the ipmievd daemon is stopped or restarted.\n(CVE-2011-4339)\n\nAll users of ipmitool are advised to upgrade to this updated package,\nwhich contains a backported patch to correct this issue. After\ninstalling this update, the IPMI event daemon (ipmievd) will be\nrestarted automatically.", "edition": 24, "published": "2013-07-12T00:00:00", "title": "Oracle Linux 6 : ipmitool (ELSA-2011-1814)", "type": "nessus", "bulletinFamily": "scanner", "cvelist": ["CVE-2011-4339"], "modified": "2013-07-12T00:00:00", "cpe": ["cpe:/o:oracle:linux:6", "p-cpe:/a:oracle:linux:ipmitool"], "id": "ORACLELINUX_ELSA-2011-1814.NASL", "href": "https://www.tenable.com/plugins/nessus/68405", "sourceData": "#%NASL_MIN_LEVEL 70300\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Red Hat Security Advisory RHSA-2011:1814 and \n# Oracle Linux Security Advisory ELSA-2011-1814 respectively.\n#\n\ninclude('deprecated_nasl_level.inc');\ninclude('compat.inc');\n\nif (description)\n{\n script_id(68405);\n script_version(\"1.10\");\n script_set_attribute(attribute:\"plugin_modification_date\", value:\"2021/01/14\");\n\n script_cve_id(\"CVE-2011-4339\");\n script_bugtraq_id(51036);\n script_xref(name:\"RHSA\", value:\"2011:1814\");\n\n script_name(english:\"Oracle Linux 6 : ipmitool (ELSA-2011-1814)\");\n script_summary(english:\"Checks rpm output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Oracle Linux host is missing a security update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"From Red Hat Security Advisory 2011:1814 :\n\nAn updated ipmitool package that fixes one security issue is now\navailable for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nmoderate security impact. A Common Vulnerability Scoring System (CVSS)\nbase score, which gives a detailed severity rating, is available from\nthe CVE link in the References section.\n\nThe ipmitool package contains a command line utility for interfacing\nwith devices that support the Intelligent Platform Management\nInterface (IPMI) specification. IPMI is an open standard for machine\nhealth, inventory, and remote power control.\n\nIt was discovered that the IPMI event daemon (ipmievd) created its\nprocess ID (PID) file with world-writable permissions. A local user\ncould use this flaw to make the ipmievd init script kill an arbitrary\nprocess when the ipmievd daemon is stopped or restarted.\n(CVE-2011-4339)\n\nAll users of ipmitool are advised to upgrade to this updated package,\nwhich contains a backported patch to correct this issue. After\ninstalling this update, the IPMI event daemon (ipmievd) will be\nrestarted automatically.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://oss.oracle.com/pipermail/el-errata/2011-December/002519.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected ipmitool package.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:ipmitool\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:linux:6\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2011/12/14\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2011/12/17\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2013/07/12\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2013-2021 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Oracle Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/OracleLinux\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/OracleLinux\")) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || !pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux)\", string:release)) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nos_ver = pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Oracle Linux\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^6([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Oracle Linux 6\", \"Oracle Linux \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Oracle Linux\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"EL6\", reference:\"ipmitool-1.8.11-12.el6_2.1\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_note(port:0, extra:rpm_report_get());\n else security_note(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"ipmitool\");\n}\n", "cvss": {"score": 3.6, "vector": "AV:L/AC:L/Au:N/C:N/I:P/A:P"}}]}
