Executive Summary

Informations
NameCVE-2011-4339First vendor Publication2011-12-14
VendorCveLast vendor Modification2013-05-29

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:N/I:P/A:P)
Cvss Base Score3.6Attack RangeLocal
Cvss Impact Score4.9Attack ComplexityLow
Cvss Expoit Score3.9AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4339

CWE : Common Weakness Enumeration

idName
CWE-264Permissions, Privileges, and Access Controls

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:22166
 
Oval ID: oval:org.mitre.oval:def:22166
Title: RHSA-2011:1814: ipmitool security update (Moderate)
Description: ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.
Family: unix Class: patch
Reference(s): RHSA-2011:1814-01
CESA-2011:1814
CVE-2011-4339
Version: 4
Platform(s): Red Hat Enterprise Linux 6
CentOS Linux 6
Product(s): ipmitool
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:20287
 
Oval ID: oval:org.mitre.oval:def:20287
Title: RHSA-2013:0123: OpenIPMI security, bug fix, and enhancement update (Low)
Description: ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.
Family: unix Class: patch
Reference(s): RHSA-2013:0123-00
CESA-2013:0123
CVE-2011-4339
Version: 4
Platform(s): Red Hat Enterprise Linux 5
CentOS Linux 5
Product(s): OpenIPMI
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:23486
 
Oval ID: oval:org.mitre.oval:def:23486
Title: ELSA-2013:0123: OpenIPMI security, bug fix, and enhancement update (Low)
Description: ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.
Family: unix Class: patch
Reference(s): ELSA-2013:0123-00
CVE-2011-4339
Version: 3
Platform(s): Oracle Linux 5
Product(s):
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:22807
 
Oval ID: oval:org.mitre.oval:def:22807
Title: ELSA-2011:1814: ipmitool security update (Moderate)
Description: ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.
Family: unix Class: patch
Reference(s): ELSA-2011:1814-01
CVE-2011-4339
Version: 3
Platform(s): Oracle Linux 6
Product(s):
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application1

OpenVAS Exploits

DateDescription
2012-07-30Name : CentOS Update for ipmitool CESA-2011:1814 centos6
File : nvt/gb_CESA-2011_1814_ipmitool_centos6.nasl
2012-07-09Name : RedHat Update for ipmitool RHSA-2011:1814-01
File : nvt/gb_RHSA-2011_1814-01_ipmitool.nasl
2012-04-02Name : Fedora Update for ipmitool FEDORA-2011-17065
File : nvt/gb_fedora_2011_17065_ipmitool_fc16.nasl
2012-02-11Name : Debian Security Advisory DSA 2376-1 (ipmitool)
File : nvt/deb_2376_1.nasl
2012-02-11Name : Debian Security Advisory DSA 2376-2 (ipmitool)
File : nvt/deb_2376_2.nasl
2012-01-09Name : Fedora Update for ipmitool FEDORA-2011-17071
File : nvt/gb_fedora_2011_17071_ipmitool_fc15.nasl
2011-12-30Name : Mandriva Update for ipmitool MDVSA-2011:196 (ipmitool)
File : nvt/gb_mandriva_MDVSA_2011_196.nasl

Open Source Vulnerability Database (OSVDB)

idDescription
77748IMPItool ipmievd PID File Process ID Exchange Local DoS

Nessus® Vulnerability Scanner

DateDescription
2013-07-12Name : The remote Oracle Linux host is missing a security update.
File : oraclelinux_ELSA-2011-1814.nasl - Type : ACT_GATHER_INFO
2013-07-12Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2013-0123.nasl - Type : ACT_GATHER_INFO
2013-01-17Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2013-0123.nasl - Type : ACT_GATHER_INFO
2013-01-17Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20130108_OpenIPMI_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2013-01-08Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2013-0123.nasl - Type : ACT_GATHER_INFO
2012-08-01Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20111213_ipmitool_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-01-12Name : The remote Debian host is missing a security-related update.
File : debian_DSA-2376.nasl - Type : ACT_GATHER_INFO
2012-01-03Name : The remote Fedora host is missing a security update.
File : fedora_2011-17065.nasl - Type : ACT_GATHER_INFO
2012-01-03Name : The remote Fedora host is missing a security update.
File : fedora_2011-17071.nasl - Type : ACT_GATHER_INFO
2011-12-29Name : The remote Mandriva Linux host is missing a security update.
File : mandriva_MDVSA-2011-196.nasl - Type : ACT_GATHER_INFO
2011-12-23Name : The remote CentOS host is missing a security update.
File : centos_RHSA-2011-1814.nasl - Type : ACT_GATHER_INFO
2011-12-14Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2011-1814.nasl - Type : ACT_GATHER_INFO

Internal Sources (Detail)

SourceUrl
CONFIRMhttp://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/...
https://bugzilla.redhat.com/show_bug.cgi?id=742837
DEBIANhttp://www.debian.org/security/2011/dsa-2376
FEDORAhttp://lists.fedoraproject.org/pipermail/package-announce/2012-January/071575...
http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071580...
MANDRIVAhttp://www.mandriva.com/security/advisories?name=MDVSA-2011:196
MLISThttp://openwall.com/lists/oss-security/2011/12/13/1
REDHAThttp://rhn.redhat.com/errata/RHSA-2013-0123.html
http://www.redhat.com/support/errata/RHSA-2011-1814.html
SECUNIAhttp://secunia.com/advisories/47173
http://secunia.com/advisories/47228
http://secunia.com/advisories/47376
XFhttp://xforce.iss.net/xforce/xfdb/71763

Alert History

If you want to see full details history, please login or register.
0
1
2
3
DateInformations
2014-02-17 11:06:12
  • Multiple Updates
2013-05-30 13:23:04
  • Multiple Updates
2013-05-10 23:10:29
  • Multiple Updates
2013-02-07 13:19:57
  • Multiple Updates