Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-2561

OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2) ibdiagnet.fdbs, (3) ibdiagnet_ibis.log, (4) ibdiagnet.log, (5) ibdiagnet.lst, (6) ibdiagnet.mcfdbs, (7) ibdiagnet.pkey, (8) ibdiagnet.psl, (9) ibdiagnet.slvl, or (10) ibdiagnet.sm in /tmp/.

Published

2013-11-23T18:55:04.610

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.3 (MEDIUM)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:N/I:C/A:C

Access Vector: LOCAL
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

3.4

Impact Score

9.2

Weaknesses

Type: Primary
CWE-59

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	redhat	enterprise_linux	6.0	Yes
Application	openfabrics	ibutils	1.5.7	Yes

References

http://rhn.redhat.com/errata/RHSA-2013-1661.html Vendor Advisory ([email protected])
http://seclists.org/fulldisclosure/2013/Mar/87 Exploit ([email protected])
http://www.openwall.com/lists/oss-security/2013/03/19/8 ([email protected])
http://www.openwall.com/lists/oss-security/2013/03/26/1 ([email protected])
http://www.openwall.com/lists/oss-security/2013/03/26/11 ([email protected])
http://www.openwall.com/lists/oss-security/2013/03/26/4 ([email protected])
http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html ([email protected])
http://www.securityfocus.com/bid/58335 ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=927430 ([email protected])
http://rhn.redhat.com/errata/RHSA-2013-1661.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2013/Mar/87 Exploit (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2013/03/19/8 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2013/03/26/1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2013/03/26/11 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2013/03/26/4 (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/58335 (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=927430 (af854a3a-2127-422b-91ae-364da2661108)