PT-2010-3340
CVE-2010-1693
·
تاريخ النشر
2010-10-26
·
تاريخ التحديث
2017-08-17
الوصف من
CVSS 2.0
6.3
متوسطةالمقاييسAV:L/AC:M/Au:N/C:N/I:C/A:C
Name of the Vulnerable Software and Affected Versions
OpenFabrics Enterprise Distribution (OFED) version 1.5.2
Description
The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ib set node desc.sh temporary file.
Recommendations
For OpenFabrics Enterprise Distribution (OFED) version 1.5.2, consider removing the execute permissions from the /tmp/ib set node desc.sh file to prevent exploitation until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾