Lucene search
HistoryNov 22, 2010 - 8:00 p.m.
CVE-2010-4173
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.
Affected configurations
Node
openfabricslibsdpRange≤1.1.104
ORopenfabricslibsdpMatch1.1.99
ORopenfabricslibsdpMatch1.1.100
ORopenfabricslibsdpMatch1.1.101
ORopenfabricslibsdpMatch1.1.102
ORopenfabricslibsdpMatch1.1.103
Related
cve
cve
CVE-2010-4173
2010-11-22 20:00:03
ubuntucve
ubuntucve
CVE-2010-4173
2010-11-22 00:00:00
prion
prion
Default configuration
2010-11-22 20:00:00
cvelist
cvelist
CVE-2010-4173
2010-11-22 19:00:00
nessus
nessus
RHEL 4 : libsdp (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 5 : libsdp (Unpatched Vulnerability)
2024-06-03 00:00:00
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2010-4173