CVE-2010-1693

openibd in OpenFabrics Enterprise Distribution (OFED) 1.5.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ib_set_node_desc.sh temporary file.

Score

CVSS 2.0 6.3 Medium

Status

Modified - bc94ec7e-8909-4cbb-83df-d2fc9330fa88

Published

2010-10-26

Last modified

2024-08-07

Weaknesses

CWE-59

Affected products

• Enterprise Distribution (Openfabrics)

References

• http://lists.openfabrics.org/pipermail/ewg/2010-October/015886.html
• http://secunia.com/advisories/41937
• http://www.openwall.com/lists/oss-security/2010/10/22/1
• http://www.osvdb.org/68856
• http://www.securityfocus.com/bid/44332
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62753