Executive Summary

Informations
Name CVE-2013-4011 First vendor Publication 2013-07-18
Vendor Cve Last vendor Modification 2017-09-19

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score 7.2 Attack Range Local
Cvss Impact Score 10 Attack Complexity Low
Cvss Expoit Score 3.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving (1) arp.ib or (2) ibstat.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4011

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:19167
 
Oval ID: oval:org.mitre.oval:def:19167
Title: Security Vulnerabilities in AIX InfiniBand
Description: Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain privileges via vectors involving (1) arp.ib or (2) ibstat.
Family: unix Class: vulnerability
Reference(s): CVE-2013-4011
 Version: 4
Platform(s): IBM AIX 6.1
IBM AIX 7.1
 Product(s):
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Os 2
Os 1

ExploitDB Exploits

id Description
2013-09-24 IBM AIX 6.1 / 7.1 - Local Root Privilege Escalation

Information Assurance Vulnerability Management (IAVM)

Date Description
2013-08-22 IAVM : 2013-B-0092 - Multiple Vulnerabilities in IBM AIX
Severity : Category I - VMSKEY : V0040107

Nessus® Vulnerability Scanner

Date Description
2013-08-15 Name : The remote AIX host is missing a vendor-supplied security patch.
File : aix_U857762.nasl - Type : ACT_GATHER_INFO
2013-08-15 Name : The remote AIX host is missing a vendor-supplied security patch.
File : aix_U859167.nasl - Type : ACT_GATHER_INFO
2013-08-13 Name : The remote AIX host is missing a vendor-supplied security patch.
File : aix_U855867.nasl - Type : ACT_GATHER_INFO
2013-08-13 Name : The remote AIX host is missing a vendor-supplied security patch.
File : aix_U858349.nasl - Type : ACT_GATHER_INFO
2013-08-10 Name : The remote AIX host is missing a vendor-supplied security patch.
File : aix_U855978.nasl - Type : ACT_GATHER_INFO
2013-08-10 Name : The remote AIX host is missing a vendor-supplied security patch.
File : aix_U857552.nasl - Type : ACT_GATHER_INFO
2013-07-19 Name : The remote AIX host is missing a security patch.
File : aix_IV43561.nasl - Type : ACT_GATHER_INFO
2013-07-19 Name : The remote AIX host is missing a security patch.
File : aix_IV43562.nasl - Type : ACT_GATHER_INFO
2013-07-19 Name : The remote AIX host is missing a security patch.
File : aix_IV43580.nasl - Type : ACT_GATHER_INFO
2013-07-19 Name : The remote AIX host is missing a security patch.
File : aix_IV43582.nasl - Type : ACT_GATHER_INFO
2013-07-19 Name : The remote AIX host is missing a security patch.
File : aix_IV43756.nasl - Type : ACT_GATHER_INFO
2013-07-19 Name : The remote AIX host is missing a security patch.
File : aix_IV43827.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
AIXAPAR http://www.ibm.com/support/docview.wss?uid=isg1IV43561
http://www.ibm.com/support/docview.wss?uid=isg1IV43562
http://www.ibm.com/support/docview.wss?uid=isg1IV43580
http://www.ibm.com/support/docview.wss?uid=isg1IV43582
http://www.ibm.com/support/docview.wss?uid=isg1IV43756
http://www.ibm.com/support/docview.wss?uid=isg1IV43827
BID http://www.securityfocus.com/bid/61287
CONFIRM http://aix.software.ibm.com/aix/efixes/security/infiniband_advisory.asc
OSVDB http://osvdb.org/95419
http://osvdb.org/95420
OVAL https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
SECTRACK http://www.securitytracker.com/id/1028792
SECUNIA http://secunia.com/advisories/54215
XF https://exchange.xforce.ibmcloud.com/vulnerabilities/85617

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
Date Informations
2021-05-04 12:27:05
  • Multiple Updates
2021-04-22 01:32:46
  • Multiple Updates
2020-05-23 13:17:03
  • Multiple Updates
2020-05-23 00:37:51
  • Multiple Updates
2017-09-19 09:26:14
  • Multiple Updates
2017-08-29 09:24:17
  • Multiple Updates
2016-06-28 19:38:07
  • Multiple Updates
2016-04-26 23:29:43
  • Multiple Updates
2014-04-04 00:19:48
  • Multiple Updates
2014-02-17 11:21:38
  • Multiple Updates
2013-12-05 17:20:45
  • Multiple Updates
2013-11-11 12:40:42
  • Multiple Updates
2013-09-29 17:20:25
  • Multiple Updates
2013-08-22 17:20:43
  • Multiple Updates
2013-07-20 17:19:41
  • Multiple Updates
2013-07-18 21:19:14
  • First insertion