PT-2010-4784 · Ocf+1 · Ocf Resource Agents+1

Published 2010-10-20 · Updated 2012-02-02 · CVE-2010-3389

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OCF Resource Agents versions 1.0.3

Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to the SAPDatabase and SAPInstance scripts in OCF Resource Agents placing a zero-length directory name in the LD LIBRARY PATH.

Recommendations For OCF Resource Agents version 1.0.3, consider restricting access to the LD LIBRARY PATH environment variable to prevent malicious library loading. As a temporary workaround, avoid using the SAPDatabase and SAPInstance scripts until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2010-3389

RHSA-2011:0264

RHSA-2011:1000

RHSA-2011:1580

RHSA-2011_1000

RHSA-2011_1580

Affected Products

Ocf Resource Agents

Red Hat

References · 12

• 🔥 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598549 · Exploit
• http://redhat.com/support/errata/RHSA-2011-1000.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-0264.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-1580.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201110-18.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-3389 · Security Note
• http://secunia.com/advisories/43372 · Note
• http://vupen.com/english/advisories/2011/0416 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=639044 · Note
• https://access.redhat.com/errata/RHSA-2011:1580 · Note
• https://access.redhat.com/errata/RHSA-2011:1000 · Note
• https://access.redhat.com/security/cve/CVE-2010-3389 · Note