PT-2014-3878 · Ibm · Gpfs

Florian Grunow · Publicado 2014-02-04 · Atualizado 2017-08-29 · CVE-2014-0834

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM General Parallel File System (GPFS) versions 3.4 through 3.4.0.27 IBM General Parallel File System (GPFS) versions 3.5 through 3.5.0.16

Description The issue allows attackers to cause a denial of service, resulting in a daemon crash, by providing crafted arguments to a setuid program.

Recommendations For IBM General Parallel File System (GPFS) versions 3.4 through 3.4.0.27, update to a version later than 3.4.0.27 to resolve the issue. For IBM General Parallel File System (GPFS) versions 3.5 through 3.5.0.16, update to a version later than 3.5.0.16 to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-0834

Produtos afetados

Gpfs

Referências · 7

• http://www-01.ibm.com/support/docview.wss?uid=isg3T1020542 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV54381 · Aviso do Fabricante
• http://securityfocus.com/bid/65297 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV52863 · Aviso do Fabricante
• http://osvdb.org/102765 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90647 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0834 · Nota de Segurança