Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Informations
Name CVE-2011-4339 First vendor Publication 2011-12-14
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:N/I:P/A:P)
Cvss Base Score 3.6 Attack Range Local
Cvss Impact Score 4.9 Attack Complexity Low
Cvss Expoit Score 3.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4339

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-732 Incorrect Permission Assignment for Critical Resource (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:15157
 
Oval ID: oval:org.mitre.oval:def:15157
Title: DSA-2376-1 ipmitool -- insecure pid file
Description: It was discovered that OpenIPMI, the Intelligent Platform Management Interface library and tools, used too wide permissions PID file, which allows local users to kill arbitrary processes by writing to this file.
Family: unix Class: patch
Reference(s): DSA-2376-1
CVE-2011-4339
 Version: 5
Platform(s): Debian GNU/Linux 6.0
Debian GNU/kFreeBSD 6.0
 Product(s): ipmitool
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:15293
 
Oval ID: oval:org.mitre.oval:def:15293
Title: DSA-2376-2 ipmitool -- insecure pid file
Description: It was discovered that OpenIPMI, the Intelligent Platform Management Interface library and tools, used too wide permissions PID file, which allows local users to kill arbitrary processes by writing to this file. The original announcement didn't contain corrections for the Debian 5.0 "lenny" distribution. This update adds packages for lenny.
Family: unix Class: patch
Reference(s): DSA-2376-2
CVE-2011-4339
 Version: 5
Platform(s): Debian GNU/Linux 5.0
Debian GNU/Linux 6.0
Debian GNU/kFreeBSD 6.0
 Product(s): ipmitool
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:20287
 
Oval ID: oval:org.mitre.oval:def:20287
Title: RHSA-2013:0123: OpenIPMI security, bug fix, and enhancement update (Low)
Description: ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.
Family: unix Class: patch
Reference(s): RHSA-2013:0123-00
CESA-2013:0123
CVE-2011-4339
 Version: 4
Platform(s): Red Hat Enterprise Linux 5
CentOS Linux 5
 Product(s): OpenIPMI
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:22166
 
Oval ID: oval:org.mitre.oval:def:22166
Title: RHSA-2011:1814: ipmitool security update (Moderate)
Description: ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.
Family: unix Class: patch
Reference(s): RHSA-2011:1814-01
CESA-2011:1814
CVE-2011-4339
 Version: 4
Platform(s): Red Hat Enterprise Linux 6
CentOS Linux 6
 Product(s): ipmitool
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:22807
 
Oval ID: oval:org.mitre.oval:def:22807
Title: ELSA-2011:1814: ipmitool security update (Moderate)
Description: ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.
Family: unix Class: patch
Reference(s): ELSA-2011:1814-01
CVE-2011-4339
 Version: 6
Platform(s): Oracle Linux 6
 Product(s): ipmitool
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:23486
 
Oval ID: oval:org.mitre.oval:def:23486
Title: ELSA-2013:0123: OpenIPMI security, bug fix, and enhancement update (Low)
Description: ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.
Family: unix Class: patch
Reference(s): ELSA-2013:0123-00
CVE-2011-4339
 Version: 6
Platform(s): Oracle Linux 5
 Product(s): OpenIPMI
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27619
 
Oval ID: oval:org.mitre.oval:def:27619
Title: DEPRECATED: ELSA-2013-0123 -- OpenIPMI security, bug fix, and enhancement update (low)
Description: [2.0.16-16.el5] - ipmitool: fix ipmi command retry shifts replies (#863310) [2.0.16-15.el5] - ipmitool: added -b, -B, -l and -T options to ipmitool man page (#846596) - ipmitool: fixed man page documentation for delloem setled command (#797050) [2.0.16-14.el5] - ipmitool: fixed wrong permissions on ipmievd.pid (#834190) [2.0.16-13.el5] - ipmitool: updated delloem commands (#797050) - ipmitool: fixed exit code of 'ipmitool -o list' command (#740780) - ipmitool: disabled automatic bridging of SDR readings to IPMB in verbose mode (#749796) - ipmitool: fixed reporting of usage of various delloem subcommands (#658762) - added path to /sbin to lsmod and modprobe (#829705)
Family: unix Class: patch
Reference(s): ELSA-2013-0123
CVE-2011-4339
 Version: 4
Platform(s): Oracle Linux 5
 Product(s): OpenIPMI
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27696
 
Oval ID: oval:org.mitre.oval:def:27696
Title: DEPRECATED: ELSA-2011-1814 -- ipmitool security update (moderate)
Description: [1.8.11-12.1] - fixed wrong permissions on ipmievd.pid (#756684)
Family: unix Class: patch
Reference(s): ELSA-2011-1814
CVE-2011-4339
 Version: 4
Platform(s): Oracle Linux 6
 Product(s): ipmitool
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1

OpenVAS Exploits

Date Description
2012-07-30 Name : CentOS Update for ipmitool CESA-2011:1814 centos6
File : nvt/gb_CESA-2011_1814_ipmitool_centos6.nasl
2012-07-09 Name : RedHat Update for ipmitool RHSA-2011:1814-01
File : nvt/gb_RHSA-2011_1814-01_ipmitool.nasl
2012-04-02 Name : Fedora Update for ipmitool FEDORA-2011-17065
File : nvt/gb_fedora_2011_17065_ipmitool_fc16.nasl
2012-02-11 Name : Debian Security Advisory DSA 2376-1 (ipmitool)
File : nvt/deb_2376_1.nasl
2012-02-11 Name : Debian Security Advisory DSA 2376-2 (ipmitool)
File : nvt/deb_2376_2.nasl
2012-01-09 Name : Fedora Update for ipmitool FEDORA-2011-17071
File : nvt/gb_fedora_2011_17071_ipmitool_fc15.nasl
2011-12-30 Name : Mandriva Update for ipmitool MDVSA-2011:196 (ipmitool)
File : nvt/gb_mandriva_MDVSA_2011_196.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
77748 IMPItool ipmievd PID File Process ID Exchange Local DoS

Nessus® Vulnerability Scanner

Date Description
2015-01-19 Name : The remote Solaris system is missing a security patch for third-party software.
File : solaris11_ipmitool_20121120.nasl - Type : ACT_GATHER_INFO
2014-11-17 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2011-1850.nasl - Type : ACT_GATHER_INFO
2013-07-12 Name : The remote Oracle Linux host is missing a security update.
File : oraclelinux_ELSA-2011-1814.nasl - Type : ACT_GATHER_INFO
2013-07-12 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2013-0123.nasl - Type : ACT_GATHER_INFO
2013-01-17 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2013-0123.nasl - Type : ACT_GATHER_INFO
2013-01-17 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20130108_OpenIPMI_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2013-01-08 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2013-0123.nasl - Type : ACT_GATHER_INFO
2012-08-01 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20111213_ipmitool_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-01-12 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-2376.nasl - Type : ACT_GATHER_INFO
2012-01-03 Name : The remote Fedora host is missing a security update.
File : fedora_2011-17065.nasl - Type : ACT_GATHER_INFO
2012-01-03 Name : The remote Fedora host is missing a security update.
File : fedora_2011-17071.nasl - Type : ACT_GATHER_INFO
2011-12-29 Name : The remote Mandriva Linux host is missing a security update.
File : mandriva_MDVSA-2011-196.nasl - Type : ACT_GATHER_INFO
2011-12-23 Name : The remote CentOS host is missing a security update.
File : centos_RHSA-2011-1814.nasl - Type : ACT_GATHER_INFO
2011-12-14 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2011-1814.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071575...
http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071580...
http://openwall.com/lists/oss-security/2011/12/13/1
http://rhn.redhat.com/errata/RHSA-2013-0123.html
http://secunia.com/advisories/47173
http://secunia.com/advisories/47228
http://secunia.com/advisories/47376
http://www.debian.org/security/2011/dsa-2376
http://www.mandriva.com/security/advisories?name=MDVSA-2011:196
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546....
http://www.redhat.com/support/errata/RHSA-2011-1814.html
http://www.securityfocus.com/bid/51036
http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/...
https://bugzilla.redhat.com/show_bug.cgi?id=742837
https://exchange.xforce.ibmcloud.com/vulnerabilities/71763
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
Date Informations
2024-11-28 23:03:19
  • Multiple Updates
2024-11-28 12:27:46
  • Multiple Updates
2022-02-04 12:11:13
  • Multiple Updates
2020-05-23 00:32:12
  • Multiple Updates
2017-08-29 09:23:36
  • Multiple Updates
2016-11-29 00:24:47
  • Multiple Updates
2016-09-09 09:23:15
  • Multiple Updates
2016-06-29 00:23:35
  • Multiple Updates
2016-04-26 21:13:57
  • Multiple Updates
2015-01-21 13:25:02
  • Multiple Updates
2014-11-18 13:25:56
  • Multiple Updates
2014-02-17 11:06:12
  • Multiple Updates
2013-05-30 13:23:04
  • Multiple Updates
2013-05-10 23:10:29
  • Multiple Updates
2013-02-07 13:19:57
  • Multiple Updates