Executive Summary
This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
| Informations | |||
|---|---|---|---|
| Name | MDVSA-2011:196 | First vendor Publication | 2011-12-28 |
| Vendor | Mandriva | Last vendor Modification | 2011-12-28 |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:N/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 3.6 | Attack Range | Local |
| Cvss Impact Score | 4.9 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| A vulnerability has been discovered and corrected in ipmitool: ipmievd as used in the ipmitool package uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file (CVE-2011-4339). In Mandriva the ipmievd daemon from the ipmitool package does not have an initscript to start and stop the service, however one could rather easily craft an initscript or start the service by other means rendering the system vulnerable to this issue. The updated packages have been patched to correct this issue. |
Original Source
| Url : http://www.mandriva.com/security/advisories?name=MDVSA-2011:196 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-732 | Incorrect Permission Assignment for Critical Resource (CWE/SANS Top 25) |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:15157 | |||
| Oval ID: | oval:org.mitre.oval:def:15157 | ||
| Title: | DSA-2376-1 ipmitool -- insecure pid file | ||
| Description: | It was discovered that OpenIPMI, the Intelligent Platform Management Interface library and tools, used too wide permissions PID file, which allows local users to kill arbitrary processes by writing to this file. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-2376-1 CVE-2011-4339 | Version: | 5 |
| Platform(s): | Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0 | Product(s): | ipmitool |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:15293 | |||
| Oval ID: | oval:org.mitre.oval:def:15293 | ||
| Title: | DSA-2376-2 ipmitool -- insecure pid file | ||
| Description: | It was discovered that OpenIPMI, the Intelligent Platform Management Interface library and tools, used too wide permissions PID file, which allows local users to kill arbitrary processes by writing to this file. The original announcement didn't contain corrections for the Debian 5.0 "lenny" distribution. This update adds packages for lenny. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-2376-2 CVE-2011-4339 | Version: | 5 |
| Platform(s): | Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0 | Product(s): | ipmitool |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:20287 | |||
| Oval ID: | oval:org.mitre.oval:def:20287 | ||
| Title: | RHSA-2013:0123: OpenIPMI security, bug fix, and enhancement update (Low) | ||
| Description: | ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file. | ||
| Family: | unix | Class: | patch |
| Reference(s): | RHSA-2013:0123-00 CESA-2013:0123 CVE-2011-4339 | Version: | 4 |
| Platform(s): | Red Hat Enterprise Linux 5 CentOS Linux 5 | Product(s): | OpenIPMI |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:22166 | |||
| Oval ID: | oval:org.mitre.oval:def:22166 | ||
| Title: | RHSA-2011:1814: ipmitool security update (Moderate) | ||
| Description: | ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file. | ||
| Family: | unix | Class: | patch |
| Reference(s): | RHSA-2011:1814-01 CESA-2011:1814 CVE-2011-4339 | Version: | 4 |
| Platform(s): | Red Hat Enterprise Linux 6 CentOS Linux 6 | Product(s): | ipmitool |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:22807 | |||
| Oval ID: | oval:org.mitre.oval:def:22807 | ||
| Title: | ELSA-2011:1814: ipmitool security update (Moderate) | ||
| Description: | ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file. | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2011:1814-01 CVE-2011-4339 | Version: | 6 |
| Platform(s): | Oracle Linux 6 | Product(s): | ipmitool |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:23486 | |||
| Oval ID: | oval:org.mitre.oval:def:23486 | ||
| Title: | ELSA-2013:0123: OpenIPMI security, bug fix, and enhancement update (Low) | ||
| Description: | ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file. | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2013:0123-00 CVE-2011-4339 | Version: | 6 |
| Platform(s): | Oracle Linux 5 | Product(s): | OpenIPMI |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:27619 | |||
| Oval ID: | oval:org.mitre.oval:def:27619 | ||
| Title: | DEPRECATED: ELSA-2013-0123 -- OpenIPMI security, bug fix, and enhancement update (low) | ||
| Description: | [2.0.16-16.el5] - ipmitool: fix ipmi command retry shifts replies (#863310) [2.0.16-15.el5] - ipmitool: added -b, -B, -l and -T options to ipmitool man page (#846596) - ipmitool: fixed man page documentation for delloem setled command (#797050) [2.0.16-14.el5] - ipmitool: fixed wrong permissions on ipmievd.pid (#834190) [2.0.16-13.el5] - ipmitool: updated delloem commands (#797050) - ipmitool: fixed exit code of 'ipmitool -o list' command (#740780) - ipmitool: disabled automatic bridging of SDR readings to IPMB in verbose mode (#749796) - ipmitool: fixed reporting of usage of various delloem subcommands (#658762) - added path to /sbin to lsmod and modprobe (#829705) | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2013-0123 CVE-2011-4339 | Version: | 4 |
| Platform(s): | Oracle Linux 5 | Product(s): | OpenIPMI |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:27696 | |||
| Oval ID: | oval:org.mitre.oval:def:27696 | ||
| Title: | DEPRECATED: ELSA-2011-1814 -- ipmitool security update (moderate) | ||
| Description: | [1.8.11-12.1] - fixed wrong permissions on ipmievd.pid (#756684) | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2011-1814 CVE-2011-4339 | Version: | 4 |
| Platform(s): | Oracle Linux 6 | Product(s): | ipmitool |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2012-07-30 | Name : CentOS Update for ipmitool CESA-2011:1814 centos6 File : nvt/gb_CESA-2011_1814_ipmitool_centos6.nasl |
| 2012-07-09 | Name : RedHat Update for ipmitool RHSA-2011:1814-01 File : nvt/gb_RHSA-2011_1814-01_ipmitool.nasl |
| 2012-04-02 | Name : Fedora Update for ipmitool FEDORA-2011-17065 File : nvt/gb_fedora_2011_17065_ipmitool_fc16.nasl |
| 2012-02-11 | Name : Debian Security Advisory DSA 2376-1 (ipmitool) File : nvt/deb_2376_1.nasl |
| 2012-02-11 | Name : Debian Security Advisory DSA 2376-2 (ipmitool) File : nvt/deb_2376_2.nasl |
| 2012-01-09 | Name : Fedora Update for ipmitool FEDORA-2011-17071 File : nvt/gb_fedora_2011_17071_ipmitool_fc15.nasl |
| 2011-12-30 | Name : Mandriva Update for ipmitool MDVSA-2011:196 (ipmitool) File : nvt/gb_mandriva_MDVSA_2011_196.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 77748 | IMPItool ipmievd PID File Process ID Exchange Local DoS |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2015-01-19 | Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_ipmitool_20121120.nasl - Type : ACT_GATHER_INFO |
| 2014-11-17 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1850.nasl - Type : ACT_GATHER_INFO |
| 2013-07-12 | Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2011-1814.nasl - Type : ACT_GATHER_INFO |
| 2013-07-12 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-0123.nasl - Type : ACT_GATHER_INFO |
| 2013-01-17 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-0123.nasl - Type : ACT_GATHER_INFO |
| 2013-01-17 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130108_OpenIPMI_on_SL5_x.nasl - Type : ACT_GATHER_INFO |
| 2013-01-08 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0123.nasl - Type : ACT_GATHER_INFO |
| 2012-08-01 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20111213_ipmitool_on_SL6_x.nasl - Type : ACT_GATHER_INFO |
| 2012-01-12 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-2376.nasl - Type : ACT_GATHER_INFO |
| 2012-01-03 | Name : The remote Fedora host is missing a security update. File : fedora_2011-17065.nasl - Type : ACT_GATHER_INFO |
| 2012-01-03 | Name : The remote Fedora host is missing a security update. File : fedora_2011-17071.nasl - Type : ACT_GATHER_INFO |
| 2011-12-29 | Name : The remote Mandriva Linux host is missing a security update. File : mandriva_MDVSA-2011-196.nasl - Type : ACT_GATHER_INFO |
| 2011-12-23 | Name : The remote CentOS host is missing a security update. File : centos_RHSA-2011-1814.nasl - Type : ACT_GATHER_INFO |
| 2011-12-14 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1814.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:42:39 |
|
