CVE-2012-4516

Related Files

Red Hat Security Advisory 2013-1661-02

Posted Nov 21, 2013

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2013-1661-02 - Red Hat Enterprise Linux includes a collection of Infiniband and iWARP utilities, libraries and development packages for writing applications that use Remote Direct Memory Access technology. A flaw was found in the way ibutils handled temporary files. A local attacker could use this flaw to cause arbitrary files to be overwritten as the root user via a symbolic link attack. It was discovered that librdmacm used a static port to connect to the ib_acm service. A local attacker able to run a specially crafted ib_acm service on that port could use this flaw to provide incorrect address resolution information to librmdacm applications.

tags | advisory, remote, arbitrary, local, root

systems | linux, redhat

advisories | CVE-2012-4516, CVE-2013-2561

SHA-256 | 8089e1d7759d7d5835e5734d3452f0ae3908b2bd35c8eb8f9983af0f999e5ebf

Download | Favorite | View