Lucene search

Bc94ec7e-8909-4cbb-83df-d2fc9330fa88CVE-2010-1693

HistoryOct 26, 2010 - 7:00 p.m.

CVE-2010-1693

2010-10-2619:00:02

CWE-59

bc94ec7e-8909-4cbb-83df-d2fc9330fa88

web.nvd.nist.gov

cve-2010-1693

openfabrics enterprise distribution

ofed

symlink attack

security vulnerability

6.3 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

openibd in OpenFabrics Enterprise Distribution (OFED) 1.5.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ib_set_node_desc.sh temporary file.

Affected configurations

NVD

Node

openfabricsenterprise_distributionMatch1.5.2

CPENameOperatorVersion
openfabrics:enterprise_distributionopenfabrics enterprise distributioneq1.5.2

CPE	Name	Operator	Version
openfabrics:enterprise_distribution	openfabrics enterprise distribution	eq	1.5.2

References

lists.openfabrics.org/pipermail/ewg/2010-October/015886.html

secunia.com/advisories/41937

www.openwall.com/lists/oss-security/2010/10/22/1

www.osvdb.org/68856

www.securityfocus.com/bid/44332

exchange.xforce.ibmcloud.com/vulnerabilities/62753

6.3 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2010-1693