Executive Summary

Informations
NameCVE-2011-4339First vendor Publication2011-12-14
VendorCveLast vendor Modification2013-05-29

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:N/I:P/A:P)
Cvss Base Score3.6Attack RangeLocal
Cvss Impact Score4.9Attack ComplexityLow
Cvss Expoit Score3.9AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4339

CWE : Common Weakness Enumeration

idName
CWE-264Permissions, Privileges, and Access Controls

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:22166
 
Oval ID: oval:org.mitre.oval:def:22166
Title: RHSA-2011:1814: ipmitool security update (Moderate)
Description: ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.
Family: unix Class: patch
Reference(s): RHSA-2011:1814-01
CESA-2011:1814
CVE-2011-4339
Version: 4
Platform(s): Red Hat Enterprise Linux 6
CentOS Linux 6
Product(s): ipmitool
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:20287
 
Oval ID: oval:org.mitre.oval:def:20287
Title: RHSA-2013:0123: OpenIPMI security, bug fix, and enhancement update (Low)
Description: ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.
Family: unix Class: patch
Reference(s): RHSA-2013:0123-00
CESA-2013:0123
CVE-2011-4339
Version: 4
Platform(s): Red Hat Enterprise Linux 5
CentOS Linux 5
Product(s): OpenIPMI
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:15293
 
Oval ID: oval:org.mitre.oval:def:15293
Title: DSA-2376-2 ipmitool -- insecure pid file
Description: It was discovered that OpenIPMI, the Intelligent Platform Management Interface library and tools, used too wide permissions PID file, which allows local users to kill arbitrary processes by writing to this file. The original announcement didn't contain corrections for the Debian 5.0 "lenny" distribution. This update adds packages for lenny.
Family: unix Class: patch
Reference(s): DSA-2376-2
CVE-2011-4339
Version: 5
Platform(s): Debian GNU/Linux 5.0
Debian GNU/Linux 6.0
Debian GNU/kFreeBSD 6.0
Product(s): ipmitool
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:15157
 
Oval ID: oval:org.mitre.oval:def:15157
Title: DSA-2376-1 ipmitool -- insecure pid file
Description: It was discovered that OpenIPMI, the Intelligent Platform Management Interface library and tools, used too wide permissions PID file, which allows local users to kill arbitrary processes by writing to this file.
Family: unix Class: patch
Reference(s): DSA-2376-1
CVE-2011-4339
Version: 5
Platform(s): Debian GNU/Linux 6.0
Debian GNU/kFreeBSD 6.0
Product(s): ipmitool
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:23486
 
Oval ID: oval:org.mitre.oval:def:23486
Title: ELSA-2013:0123: OpenIPMI security, bug fix, and enhancement update (Low)
Description: ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.
Family: unix Class: patch
Reference(s): ELSA-2013:0123-00
CVE-2011-4339
Version: 6
Platform(s): Oracle Linux 5
Product(s): OpenIPMI
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:22807
 
Oval ID: oval:org.mitre.oval:def:22807
Title: ELSA-2011:1814: ipmitool security update (Moderate)
Description: ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.
Family: unix Class: patch
Reference(s): ELSA-2011:1814-01
CVE-2011-4339
Version: 6
Platform(s): Oracle Linux 6
Product(s): ipmitool
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27696
 
Oval ID: oval:org.mitre.oval:def:27696
Title: ELSA-2011-1814 -- ipmitool security update (moderate)
Description: [1.8.11-12.1] - fixed wrong permissions on ipmievd.pid (#756684)
Family: unix Class: patch
Reference(s): ELSA-2011-1814
CVE-2011-4339
Version: 3
Platform(s): Oracle Linux 6
Product(s): ipmitool
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27619
 
Oval ID: oval:org.mitre.oval:def:27619
Title: ELSA-2013-0123 -- OpenIPMI security, bug fix, and enhancement update (low)
Description: [2.0.16-16.el5] - ipmitool: fix ipmi command retry shifts replies (#863310) [2.0.16-15.el5] - ipmitool: added -b, -B, -l and -T options to ipmitool man page (#846596) - ipmitool: fixed man page documentation for delloem setled command (#797050) [2.0.16-14.el5] - ipmitool: fixed wrong permissions on ipmievd.pid (#834190) [2.0.16-13.el5] - ipmitool: updated delloem commands (#797050) - ipmitool: fixed exit code of 'ipmitool -o list' command (#740780) - ipmitool: disabled automatic bridging of SDR readings to IPMB in verbose mode (#749796) - ipmitool: fixed reporting of usage of various delloem subcommands (#658762) - added path to /sbin to lsmod and modprobe (#829705)
Family: unix Class: patch
Reference(s): ELSA-2013-0123
CVE-2011-4339
Version: 3
Platform(s): Oracle Linux 5
Product(s): OpenIPMI
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application1

OpenVAS Exploits

DateDescription
2012-07-30Name : CentOS Update for ipmitool CESA-2011:1814 centos6
File : nvt/gb_CESA-2011_1814_ipmitool_centos6.nasl
2012-07-09Name : RedHat Update for ipmitool RHSA-2011:1814-01
File : nvt/gb_RHSA-2011_1814-01_ipmitool.nasl
2012-04-02Name : Fedora Update for ipmitool FEDORA-2011-17065
File : nvt/gb_fedora_2011_17065_ipmitool_fc16.nasl
2012-02-11Name : Debian Security Advisory DSA 2376-1 (ipmitool)
File : nvt/deb_2376_1.nasl
2012-02-11Name : Debian Security Advisory DSA 2376-2 (ipmitool)
File : nvt/deb_2376_2.nasl
2012-01-09Name : Fedora Update for ipmitool FEDORA-2011-17071
File : nvt/gb_fedora_2011_17071_ipmitool_fc15.nasl
2011-12-30Name : Mandriva Update for ipmitool MDVSA-2011:196 (ipmitool)
File : nvt/gb_mandriva_MDVSA_2011_196.nasl

Open Source Vulnerability Database (OSVDB)

idDescription
77748IMPItool ipmievd PID File Process ID Exchange Local DoS

Nessus® Vulnerability Scanner

DateDescription
2014-11-17Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2011-1850.nasl - Type : ACT_GATHER_INFO
2013-07-12Name : The remote Oracle Linux host is missing a security update.
File : oraclelinux_ELSA-2011-1814.nasl - Type : ACT_GATHER_INFO
2013-07-12Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2013-0123.nasl - Type : ACT_GATHER_INFO
2013-01-17Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2013-0123.nasl - Type : ACT_GATHER_INFO
2013-01-17Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20130108_OpenIPMI_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2013-01-08Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2013-0123.nasl - Type : ACT_GATHER_INFO
2012-08-01Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20111213_ipmitool_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-01-12Name : The remote Debian host is missing a security-related update.
File : debian_DSA-2376.nasl - Type : ACT_GATHER_INFO
2012-01-03Name : The remote Fedora host is missing a security update.
File : fedora_2011-17065.nasl - Type : ACT_GATHER_INFO
2012-01-03Name : The remote Fedora host is missing a security update.
File : fedora_2011-17071.nasl - Type : ACT_GATHER_INFO
2011-12-29Name : The remote Mandriva Linux host is missing a security update.
File : mandriva_MDVSA-2011-196.nasl - Type : ACT_GATHER_INFO
2011-12-23Name : The remote CentOS host is missing a security update.
File : centos_RHSA-2011-1814.nasl - Type : ACT_GATHER_INFO
2011-12-14Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2011-1814.nasl - Type : ACT_GATHER_INFO

Internal Sources (Detail)

SourceUrl
CONFIRMhttp://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/...
https://bugzilla.redhat.com/show_bug.cgi?id=742837
DEBIANhttp://www.debian.org/security/2011/dsa-2376
FEDORAhttp://lists.fedoraproject.org/pipermail/package-announce/2012-January/071575...
http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071580...
MANDRIVAhttp://www.mandriva.com/security/advisories?name=MDVSA-2011:196
MLISThttp://openwall.com/lists/oss-security/2011/12/13/1
REDHAThttp://rhn.redhat.com/errata/RHSA-2013-0123.html
http://www.redhat.com/support/errata/RHSA-2011-1814.html
SECUNIAhttp://secunia.com/advisories/47173
http://secunia.com/advisories/47228
http://secunia.com/advisories/47376
XFhttp://xforce.iss.net/xforce/xfdb/71763

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
DateInformations
2014-11-18 13:25:56
  • Multiple Updates
2014-02-17 11:06:12
  • Multiple Updates
2013-05-30 13:23:04
  • Multiple Updates
2013-05-10 23:10:29
  • Multiple Updates
2013-02-07 13:19:57
  • Multiple Updates