Lucene search
HistoryNov 22, 2010 - 8:00 p.m.
CVE-2010-4173
cve-2010-4173
libsdp
security
vulnerability
log files
symlink attack
hard link attack
nvd
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.
Affected configurations
Node
openfabricslibsdpRange≤1.1.104
ORopenfabricslibsdpMatch1.1.99
ORopenfabricslibsdpMatch1.1.100
ORopenfabricslibsdpMatch1.1.101
ORopenfabricslibsdpMatch1.1.102
ORopenfabricslibsdpMatch1.1.103
Related
cvelist
cvelist
CVE-2010-4173
2010-11-22 19:00:00
nessus
nessus
RHEL 4 : libsdp (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 5 : libsdp (Unpatched Vulnerability)
2024-06-03 00:00:00
nvd
nvd
CVE-2010-4173
2010-11-22 20:00:03
ubuntucve
ubuntucve
CVE-2010-4173
2010-11-22 00:00:00
prion
prion
Default configuration
2010-11-22 20:00:00
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2010-4173