CVE-2010-4173 The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the...
LowCVSS 3.3
EPSS 0.29%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openfabrics libsdp | <= 1.1.104 | No fix listed |
| openfabrics libsdp | = 1.1.99 | No fix listed |
| openfabrics libsdp | = 1.1.100 | No fix listed |
| openfabrics libsdp | = 1.1.101 | No fix listed |
| openfabrics libsdp | = 1.1.102 | No fix listed |
| openfabrics libsdp | = 1.1.103 | No fix listed |
References
- www.openfabrics.org patch
- [oss-security] 20101116 CVE Request: libsdp mailing-list patch
- [oss-security] 20101116 Re: CVE Request: libsdp mailing-list patch
- bugzilla.redhat.com patch