CVE-2008-3277

2014-04-1523:55:06

CWE-22

redhat

web.nvd.nist.gov

cve-2008-3277

red hat

ibutils

vulnerability

rhel 6

rhel 5

elf header

privilege escalation

nvd

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.4

Confidence

Low

EPSS

Percentile

9.9%

JSON

Untrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable in ibutils packages before ibutils-1.5.7-2.el6 in Red Hat Enterprise Linux (RHEL) 6 and ibutils-1.2-11.2.el5 in Red Hat Enterprise Linux (RHEL) 5 allows local users to gain privileges via a Trojan Horse program in refix/lib/, related to an incorrect RPATH setting in the ELF header.

Affected configurations

Nvd

Node

openfabricsibutilsMatch1.5.7-2

AND

redhatenterprise_linuxMatch6.0

Node

openfabricsibutilsMatch1.2-11.2

AND

redhatenterprise_linuxMatch5

VendorProductVersionCPE
openfabricsibutils1.5.7-2cpe:2.3:a:openfabrics:ibutils:1.5.7-2:*:*:*:*:*:*:*
redhatenterprise_linux6.0cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
openfabricsibutils1.2-11.2cpe:2.3:a:openfabrics:ibutils:1.2-11.2:*:*:*:*:*:*:*
redhatenterprise_linux5cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openfabrics	ibutils	1.5.7-2	cpe:2.3:a:openfabrics:ibutils:1.5.7-2:::::::*
redhat	enterprise_linux	6.0	cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*
openfabrics	ibutils	1.2-11.2	cpe:2.3:a:openfabrics:ibutils:1.2-11.2:::::::*
redhat	enterprise_linux	5	cpe:2.3:o:redhat:enterprise_linux:5:::::::*