PT-2013-4904 · Intel · Intel Wimax Network Service

Publicado 2013-08-25 · Atualizado 2013-08-27 · CVE-2013-4216

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Intel WiMAX Network Service versions prior to 1.5.3

Description The issue concerns the Trace OpenLogFile function in the Trace module, which uses world-writable permissions for the wimaxd.log file. This allows local users to cause a denial of service by modifying the file, resulting in data corruption.

Recommendations For versions prior to 1.5.3, consider restricting write access to the wimaxd.log file to prevent local users from modifying it and causing data corruption. As a temporary workaround, restrict access to the Trace OpenLogFile function until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-4216

Produtos afetados

Intel Wimax Network Service

Referências · 3

• https://bugzilla.redhat.com/show_bug.cgi?id=911122 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4216 · Nota de Segurança
• http://openwall.com/lists/oss-security/2013/08/08/17 · Nota