Security Bulletin: IBM Netezza Host Management (CVE-2014-5119)

Summary

Proof of Concept exploit code has been released on August 25th, which uses a flaw in glibc that can allow a local unprivileged user to gain root on Linux machines.

Vulnerability Details

CVEID:CVE-2014-5119

DESCRIPTION:

Proof of Concept exploit code has been released on August 25th, which uses a flaw in glibc that can allow a local unprivileged user to gain root on Linux machines. The RedHat Linux OS, up through 5.10 and 6.5, contain this vulnerability. The Netezza Host Management product contains updates to the RedHat Linux OS.

CVSS Base Score: 7.2
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/95044 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Affected Products and Versions

IBM Netezza Host Management prior to 5.3.2.0

Remediation/Fixes

Product

| VRMF| APAR| Remediation/First Fix
—|—|—|—
I__BM Netezz__a Host Management| 5.3.2.0|
| http://www-933.ibm.com/support/fixcentral

Workarounds and Mitigations

None