Executive Summary
This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
| Summary | |
|---|---|
| Title | ipmitool security update |
| Informations | |||
|---|---|---|---|
| Name | RHSA-2011:1814 | First vendor Publication | 2011-12-13 |
| Vendor | RedHat | Last vendor Modification | 2011-12-13 |
| Severity (Vendor) | Moderate | Revision | 01 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:N/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 3.6 | Attack Range | Local |
| Cvss Impact Score | 4.9 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Problem Description: An updated ipmitool package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 3. Description: The ipmitool package contains a command line utility for interfacing with devices that support the Intelligent Platform Management Interface (IPMI) specification. IPMI is an open standard for machine health, inventory, and remote power control. It was discovered that the IPMI event daemon (ipmievd) created its process ID (PID) file with world-writable permissions. A local user could use this flaw to make the ipmievd init script kill an arbitrary process when the ipmievd daemon is stopped or restarted. (CVE-2011-4339) All users of ipmitool are advised to upgrade to this updated package, which contains a backported patch to correct this issue. After installing this update, the IPMI event daemon (ipmievd) will be restarted automatically. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259 5. Bugs fixed (http://bugzilla.redhat.com/): 742837 - CVE-2011-4339 OpenIPMI: IPMI event daemon creates PID file with world writeable permissions |
Original Source
| Url : https://rhn.redhat.com/errata/RHSA-2011-1814.html |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-732 | Incorrect Permission Assignment for Critical Resource (CWE/SANS Top 25) |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:15157 | |||
| Oval ID: | oval:org.mitre.oval:def:15157 | ||
| Title: | DSA-2376-1 ipmitool -- insecure pid file | ||
| Description: | It was discovered that OpenIPMI, the Intelligent Platform Management Interface library and tools, used too wide permissions PID file, which allows local users to kill arbitrary processes by writing to this file. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-2376-1 CVE-2011-4339 | Version: | 5 |
| Platform(s): | Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0 | Product(s): | ipmitool |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:15293 | |||
| Oval ID: | oval:org.mitre.oval:def:15293 | ||
| Title: | DSA-2376-2 ipmitool -- insecure pid file | ||
| Description: | It was discovered that OpenIPMI, the Intelligent Platform Management Interface library and tools, used too wide permissions PID file, which allows local users to kill arbitrary processes by writing to this file. The original announcement didn't contain corrections for the Debian 5.0 "lenny" distribution. This update adds packages for lenny. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-2376-2 CVE-2011-4339 | Version: | 5 |
| Platform(s): | Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0 | Product(s): | ipmitool |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:20287 | |||
| Oval ID: | oval:org.mitre.oval:def:20287 | ||
| Title: | RHSA-2013:0123: OpenIPMI security, bug fix, and enhancement update (Low) | ||
| Description: | ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file. | ||
| Family: | unix | Class: | patch |
| Reference(s): | RHSA-2013:0123-00 CESA-2013:0123 CVE-2011-4339 | Version: | 4 |
| Platform(s): | Red Hat Enterprise Linux 5 CentOS Linux 5 | Product(s): | OpenIPMI |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:22166 | |||
| Oval ID: | oval:org.mitre.oval:def:22166 | ||
| Title: | RHSA-2011:1814: ipmitool security update (Moderate) | ||
| Description: | ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file. | ||
| Family: | unix | Class: | patch |
| Reference(s): | RHSA-2011:1814-01 CESA-2011:1814 CVE-2011-4339 | Version: | 4 |
| Platform(s): | Red Hat Enterprise Linux 6 CentOS Linux 6 | Product(s): | ipmitool |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:22807 | |||
| Oval ID: | oval:org.mitre.oval:def:22807 | ||
| Title: | ELSA-2011:1814: ipmitool security update (Moderate) | ||
| Description: | ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file. | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2011:1814-01 CVE-2011-4339 | Version: | 6 |
| Platform(s): | Oracle Linux 6 | Product(s): | ipmitool |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:23486 | |||
| Oval ID: | oval:org.mitre.oval:def:23486 | ||
| Title: | ELSA-2013:0123: OpenIPMI security, bug fix, and enhancement update (Low) | ||
| Description: | ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file. | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2013:0123-00 CVE-2011-4339 | Version: | 6 |
| Platform(s): | Oracle Linux 5 | Product(s): | OpenIPMI |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:27619 | |||
| Oval ID: | oval:org.mitre.oval:def:27619 | ||
| Title: | DEPRECATED: ELSA-2013-0123 -- OpenIPMI security, bug fix, and enhancement update (low) | ||
| Description: | [2.0.16-16.el5] - ipmitool: fix ipmi command retry shifts replies (#863310) [2.0.16-15.el5] - ipmitool: added -b, -B, -l and -T options to ipmitool man page (#846596) - ipmitool: fixed man page documentation for delloem setled command (#797050) [2.0.16-14.el5] - ipmitool: fixed wrong permissions on ipmievd.pid (#834190) [2.0.16-13.el5] - ipmitool: updated delloem commands (#797050) - ipmitool: fixed exit code of 'ipmitool -o list' command (#740780) - ipmitool: disabled automatic bridging of SDR readings to IPMB in verbose mode (#749796) - ipmitool: fixed reporting of usage of various delloem subcommands (#658762) - added path to /sbin to lsmod and modprobe (#829705) | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2013-0123 CVE-2011-4339 | Version: | 4 |
| Platform(s): | Oracle Linux 5 | Product(s): | OpenIPMI |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:27696 | |||
| Oval ID: | oval:org.mitre.oval:def:27696 | ||
| Title: | DEPRECATED: ELSA-2011-1814 -- ipmitool security update (moderate) | ||
| Description: | [1.8.11-12.1] - fixed wrong permissions on ipmievd.pid (#756684) | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2011-1814 CVE-2011-4339 | Version: | 4 |
| Platform(s): | Oracle Linux 6 | Product(s): | ipmitool |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2012-07-30 | Name : CentOS Update for ipmitool CESA-2011:1814 centos6 File : nvt/gb_CESA-2011_1814_ipmitool_centos6.nasl |
| 2012-07-09 | Name : RedHat Update for ipmitool RHSA-2011:1814-01 File : nvt/gb_RHSA-2011_1814-01_ipmitool.nasl |
| 2012-04-02 | Name : Fedora Update for ipmitool FEDORA-2011-17065 File : nvt/gb_fedora_2011_17065_ipmitool_fc16.nasl |
| 2012-02-11 | Name : Debian Security Advisory DSA 2376-1 (ipmitool) File : nvt/deb_2376_1.nasl |
| 2012-02-11 | Name : Debian Security Advisory DSA 2376-2 (ipmitool) File : nvt/deb_2376_2.nasl |
| 2012-01-09 | Name : Fedora Update for ipmitool FEDORA-2011-17071 File : nvt/gb_fedora_2011_17071_ipmitool_fc15.nasl |
| 2011-12-30 | Name : Mandriva Update for ipmitool MDVSA-2011:196 (ipmitool) File : nvt/gb_mandriva_MDVSA_2011_196.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 77748 | IMPItool ipmievd PID File Process ID Exchange Local DoS |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2015-01-19 | Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_ipmitool_20121120.nasl - Type : ACT_GATHER_INFO |
| 2014-11-17 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1850.nasl - Type : ACT_GATHER_INFO |
| 2013-07-12 | Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2011-1814.nasl - Type : ACT_GATHER_INFO |
| 2013-07-12 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-0123.nasl - Type : ACT_GATHER_INFO |
| 2013-01-17 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-0123.nasl - Type : ACT_GATHER_INFO |
| 2013-01-17 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130108_OpenIPMI_on_SL5_x.nasl - Type : ACT_GATHER_INFO |
| 2013-01-08 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0123.nasl - Type : ACT_GATHER_INFO |
| 2012-08-01 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20111213_ipmitool_on_SL6_x.nasl - Type : ACT_GATHER_INFO |
| 2012-01-12 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-2376.nasl - Type : ACT_GATHER_INFO |
| 2012-01-03 | Name : The remote Fedora host is missing a security update. File : fedora_2011-17065.nasl - Type : ACT_GATHER_INFO |
| 2012-01-03 | Name : The remote Fedora host is missing a security update. File : fedora_2011-17071.nasl - Type : ACT_GATHER_INFO |
| 2011-12-29 | Name : The remote Mandriva Linux host is missing a security update. File : mandriva_MDVSA-2011-196.nasl - Type : ACT_GATHER_INFO |
| 2011-12-23 | Name : The remote CentOS host is missing a security update. File : centos_RHSA-2011-1814.nasl - Type : ACT_GATHER_INFO |
| 2011-12-14 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1814.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:55:26 |
|
