PT-2010-3340

CVE-2010-1693

·

Published

2010-10-26

·

Updated

2017-08-17

Description by

CVSS 2.0
6.3
Medium
MetricsAV:L/AC:M/Au:N/C:N/I:C/A:C
Name of the Vulnerable Software and Affected Versions OpenFabrics Enterprise Distribution (OFED) version 1.5.2
Description The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ib set node desc.sh temporary file.
Recommendations For OpenFabrics Enterprise Distribution (OFED) version 1.5.2, consider removing the execute permissions from the /tmp/ib set node desc.sh file to prevent exploitation until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-59: Improper Link Resolution Before File Access (\'Link Following\')
Related identifiers
CVE-2010-1693
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com