Lucene search
PRIOn knowledge basePRION:CVE-2016-7035HistorySep 10, 2018 - 4:29 p.m.
Authorization
2018-09-1016:29:00
PRIOn knowledge base
www.prio-n.com
6
An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gain root access on the machine.
References
rhn.redhat.com/errata/RHSA-2016-2614.html
rhn.redhat.com/errata/RHSA-2016-2675.html
www.openwall.com/lists/oss-security/2016/11/03/5
www.securityfocus.com/bid/94214
bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7035
github.com/ClusterLabs/pacemaker/commit/5d71e65049
lists.clusterlabs.org/pipermail/users/2016-November/004432.html
security.gentoo.org/glsa/201710-08
Related
openvas
openvas
Fedora Update for pacemaker FEDORA-2016-242ff9a2fa
2016-12-02 00:00:00
CentOS Update for pacemaker CESA-2016:2675 centos6
2016-11-13 00:00:00
Fedora Update for pacemaker FEDORA-2016-c1cbcc4528
2016-12-07 00:00:00
osv
osv
CVE-2016-7035
2018-09-10 16:29:00
redhat
redhat
(RHSA-2016:2675) Important: pacemaker security update
2016-11-08 12:55:03
(RHSA-2016:2614) Important: pacemaker security and bug fix update
2016-11-03 11:40:05
nessus
nessus
Fedora 25 : pacemaker (2016-c1cbcc4528)
2016-11-15 00:00:00
RHEL 7 : pacemaker (RHSA-2016:2614)
2016-11-07 00:00:00
Scientific Linux Security Update : pacemaker on SL7.x x86_64 (20161103)
2016-12-15 00:00:00
centos
centos
pacemaker security update
2016-11-12 06:32:37
pacemaker security update
2016-11-25 16:47:54
cve
cve
CVE-2016-7035
2018-09-10 16:29:00
fedora
fedora
[SECURITY] Fedora 23 Update: pacemaker-1.1.15-2.fc23
2016-11-08 22:57:09
[SECURITY] Fedora 24 Update: pacemaker-1.1.15-2.fc24
2016-11-06 00:28:32
[SECURITY] Fedora 25 Update: pacemaker-1.1.15-3.fc25
2016-11-10 16:39:31
redhatcve
redhatcve
CVE-2016-7035
2016-11-03 08:47:26
veracode
veracode
Privilege Escalation
2019-01-15 09:14:27
cvelist
cvelist
CVE-2016-7035
2018-09-10 16:00:00
nvd
nvd
CVE-2016-7035
2018-09-10 16:29:00
debiancve
debiancve
CVE-2016-7035
2018-09-10 16:29:00
ubuntucve
ubuntucve
CVE-2016-7035
2016-11-03 00:00:00
ubuntu
ubuntu
Pacemaker vulnerabilities
2017-10-24 00:00:00
gentoo
gentoo
Pacemaker: Multiple vulnerabilities
2017-10-08 00:00:00
suse
suse
Security update for pacemaker (important)
2016-11-22 15:07:40
Security update for pacemaker (important)
2016-12-01 18:13:18