NVD

Id
10802  
Name
CVE-2011-4339  
Description
ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-12-14  
Modified Date
2016-11-28  
Seq
2011-4339  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
60691 10802 CVE-2011-4339 FEDORA-2011-17071  View
60692 10802 CVE-2011-4339 FEDORA-2011-17065  View
60693 10802 CVE-2011-4339 [oss-security] 20111213 OpenIPMI: IPMI event daemon creates PID file with world writeable permissions  View
60694 10802 CVE-2011-4339 RHSA-2013:0123  View
60695 10802 CVE-2011-4339 DSA-2376  View
60696 10802 CVE-2011-4339 MDVSA-2011:196  View
60697 10802 CVE-2011-4339 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
60698 10802 CVE-2011-4339 RHSA-2011:1814  View
60699 10802 CVE-2011-4339 51036  View
60700 10802 CVE-2011-4339 http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf  View
60701 10802 CVE-2011-4339 impitool-pid-dos(71763)  View
60702 10802 CVE-2011-4339 https://bugzilla.redhat.com/show_bug.cgi?id=742837  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33162 JVNDB-2011-003402 OpenIPMI の ipmievd における任意のプロセスを停止される脆弱性 Red Hat Enterprise Linux (RHEL) 6 の ipmitool パッケージで使用される OpenIPMI の ipmievd は、ipmievd.pid PID ファイルに 0666 パーミッションを使用しているため、任意のプロセスを停止される脆弱性が存在します。 CVE-2011-4339 52246 CVE-2011-4339 10802 3.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003402.html 2011-12-15 2013-06-05 View