CVE-2011-4339 ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for....
LowCVSS 3.6
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ipmitool(Debian:12) | < 1.8.11-5 | 1.8.11-5 |
| debian/ipmitool(Debian:13) | < 1.8.11-5 | 1.8.11-5 |
| debian/ipmitool(Debian:14) | < 1.8.11-5 | 1.8.11-5 |
| ipmitool project ipmitool | = 1.8.11 | No fix listed |
References
- Debian Security Tracker CVE-2011-4339 vendor-advisory
- FEDORA-2011-17071 third-party-advisory vendor-advisory
- FEDORA-2011-17065 third-party-advisory vendor-advisory
- [oss-security] 20111213 OpenIPMI: IPMI event daemon creates PID file with world writeable permissions mailing-list third-party-advisory
- RHSA-2013:0123 third-party-advisory vendor-advisory
- 47173 broken-link third-party-advisory
- 47228 broken-link third-party-advisory
- 47376 broken-link third-party-advisory
- DSA-2376 third-party-advisory vendor-advisory
- MDVSA-2011:196 broken-link vendor-advisory
- www.oracle.com third-party-advisory
- RHSA-2011:1814 third-party-advisory vendor-advisory
- 51036 third-party-advisory vdb-entry
- www.xerox.com third-party-advisory
- bugzilla.redhat.com issue-tracking patch
- impitool-pid-dos(71763) third-party-advisory vdb-entry
- bugs.debian.org issue-tracking