ibacm: DoS (ibacm deamon crash) by joining responses for multicast destinations

ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of service ibacm service crash via a crafted join response...

CVE-2012-4518

ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ibacm daemon log or ibacm.port file...

CVE-2012-4517

ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of service ibacm service crash via a crafted join response...

UBUNTU-CVE-2012-4516

librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ibacm service...

Arbitrary file deletion

ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ibacm daemon log or ibacm.port file...

Code injection

ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of service ibacm service crash via a crafted join response...

CVE-2012-4517

ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of service ibacm service crash via a crafted join response...

CVE-2012-4518

ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ibacm daemon log or ibacm.port file...

CVE-2012-4516

CVE-2012-4516 affects librdmacm 1.0.16 where ibacm.port is not specified and the service connects to port 6125, enabling a remote attacker to influence the application’s address resolution via a malicious ib_acm service. Public records in multiple advisories note the fix in librdmacm 1.0.17 and a...

CVE-2012-4517

CVE-2012-4517 affects ibacm before 1.0.6, which fails to correctly manage multicast reference counts and can cause an ibacm service crash (DoS) from a crafted join response. Public references in the connected advisories indicate affected components include ibacm and related RDMA stack packages; r...

CVE-2012-4518

CVE-2012-4518 affects ibacm 1.0.7, where files are created with world-writable permissions. This allows local users to overwrite the ib_acm daemon log or ibacm.port, enabling potential local impact. The connected Nessus entries corroborate the issue as part of MiracleLinux/Oracle Linux advisories...

PT-2012-5456 · Intel +2 · Ibacm +2

Name of the Vulnerable Software and Affected Versions: ibacm version 1.0.7 Description: The issue allows local users to overwrite the ib acm daemon log or ibacm.port file due to world-writable permissions set by ibacm 1.0.7. Recommendations: For ibacm version 1.0.7, consider changing the file...