CVE-2013-4011

Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving 1 arp.ib or 2 ibstat...

CVE-2013-4011

CVE-2013-4011 affects IBM AIX 6.1/7.1 (and VIOS 2.2.2.2-FP-26 SP-02) InfiniBand subsystem components, enabling local privilege escalation via vulnerable paths in ibstat and arp.ib. Public references describe local-root escalation through a trusted SUID ibstat-based workflow and list related explo...

CVE-2013-4011

Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving 1 arp.ib or 2 ibstat. Recent assessments: timb-machine at March 05, 2021 12:44am UTC reported: Assessed Attacker Value:...

Security Vulnerabilities in AIX InfiniBand,Security Vulnerabilities in VIOS InfiniBand

IBM SECURITY ADVISORY First Issued: Tue Jul 16 10:46:04 CDT 2013 The most recent version of this document is available here: | Updated: Mon Oct 14 20:02:42 CDT 2013 | Update: Includes VIOS in Vulnerability Summary | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added KEYs for parsing purpose...

Oracle Linux 5 : kernel (ELSA-2012-1323)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1323 advisory. - net sfc: Fix max no of TSO segments and min TX queue size Michal Schmidt 845554 845555 CVE-2012-3412 - kernel xacctaddtsk: fix pure theoretical -mm...

Oracle Linux 5 : kernel (ELSA-2008-0885)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0885 advisory. - sound sndseqosssynthmakeinfo info leak Eugene Teo 458000 458001 CVE-2008-3272 - mm tmpfs: restore missing clearhighpage Eugene Teo 426082...

Oracle Linux 6 : rdma (ELSA-2013-0509)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0509 advisory. ibacm 1.0.8-0.git7a3adb7 - Update to latest upstream via git repo - Resolves: bz866222, bz866223 ibsim 0.5-7 - Bump and rebuild against latest opensm -...

Oracle Linux 5 : kernel (ELSA-2011-0927)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0927 advisory. - Revert: xen hvm: svm support cleanups Andrew Jones 703715 702657 CVE-2011-1780 - Revert: xen hvm: secure svmcraccess Andrew Jones 703715 702657...

Oracle Linux 5 : ibutils (ELSA-2012-0311)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0311 advisory. - Add patch for CVE-2008-3277 Resolves: bz768400 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 6 : kernel (ELSA-2011-0498)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0498 advisory. - drm radeon/kms: check AA resolve registers on r300 + regression fix Dave Airlie 680001 680002 CVE-2011-1016 - infiniband uverbs: Handle large number ...

kernel security and bug fix update

2.6.32-358.6.1 - virt kvm: accept unaligned MSRKVMSYSTEMTIME writes Petr Matousek 917020 917021 CVE-2013-1796 - char tty: hold lock across tty buffer finding and buffer filling Prarit Bhargava 928686 901780 - net tcp: fix for zero packetsinflight was too broad Thomas Graf 927309 920794 - net tcp:...

OpenFabrics ibutils symbolic links vulnerability

infiniband utility unsafe temporary files creation...

OpenFabrics ibutils 1.5.7 /tmp clobbering vulnerability

OpenFabrics ibutils 1.5.7 /tmp clobbering vulnerability 3/6/2013 Larry W. Cashdollar @larry0 The infiniband diagnostic utiltiy handles files in /tmp insecurely. A malicious user can clobber root owned files with common symlink attacks. http://www.openfabrics.org/downloads/ibutils/ nobody@exdb01...

CentOS Update for rdma CESA-2013:0509 centos6

Check for the Version of rdma OpenVAS Vulnerability Test CentOS Update for rdma CESA-2013:0509 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for libibverbs CESA-2013:0509 centos6

Check for the Version of libibverbs OpenVAS Vulnerability Test CentOS Update for libibverbs CESA-2013:0509 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for ibutils CESA-2013:0509 centos6

Check for the Version of ibutils OpenVAS Vulnerability Test CentOS Update for ibutils CESA-2013:0509 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for libmlx4 CESA-2013:0509 centos6

Check for the Version of libmlx4 OpenVAS Vulnerability Test CentOS Update for libmlx4 CESA-2013:0509 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CentOS Update for infiniband-diags CESA-2013:0509 centos6

Check for the Version of infiniband-diags OpenVAS Vulnerability Test CentOS Update for infiniband-diags CESA-2013:0509 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...

CentOS Update for libibmad CESA-2013:0509 centos6

Check for the Version of libibmad OpenVAS Vulnerability Test CentOS Update for libibmad CESA-2013:0509 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CentOS Update for ibacm CESA-2013:0509 centos6

Check for the Version of ibacm OpenVAS Vulnerability Test CentOS Update for ibacm CESA-2013:0509 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...