Release Date: | 2012-10-09 |
ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ib_acm daemon log or ibacm.port file.
See more information about CVE-2012-4518 from MITRE CVE dictionary and NIST NVD
NOTE: The following CVSS v2.0 metrics and score provided are preliminary and subject to review.
Base Score: | 2.1 | Base Metrics: | AV:L/AC:L/Au:N/C:N/I:N/A:P |
Access Vector: | Local network | Attack Complexity: | Low |
Authentication: | None required | Confidentiality Impact: | None |
Integrity Impact: | None | Availability Impact: | Partial |
Platform | Errata | Release Date |
Oracle Linux version 6 (ibacm) | ELSA-2013-0509 | 2013-02-22 |
Oracle Linux version 6 (ibsim) | ELSA-2013-0509 | 2013-02-22 |
Oracle Linux version 6 (ibutils) | ELSA-2013-0509 | 2013-02-22 |
Oracle Linux version 6 (infiniband-diags) | ELSA-2013-0509 | 2013-02-22 |
Oracle Linux version 6 (infinipath-psm) | ELSA-2013-0509 | 2013-02-22 |
Oracle Linux version 6 (libibmad) | ELSA-2013-0509 | 2013-02-22 |
Oracle Linux version 6 (libibumad) | ELSA-2013-0509 | 2013-02-22 |
Oracle Linux version 6 (libibverbs) | ELSA-2013-0509 | 2013-02-22 |
Oracle Linux version 6 (libmlx4) | ELSA-2013-0509 | 2013-02-22 |
Oracle Linux version 6 (librdmacm) | ELSA-2013-0509 | 2013-02-22 |
Oracle Linux version 6 (opensm) | ELSA-2013-0509 | 2013-02-22 |
Oracle Linux version 6 (rdma) | ELSA-2013-0509 | 2013-02-22 |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team