PT-2013-3843 · Openfabrics+2 · Ibutils+2

Vincent Danen · Published 2013-11-20 · Updated 2019-04-22 · CVE-2013-2561

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Medium

Base vector

AV:L/AC:M/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenFabrics ibutils version 1.5.7

Description The issue allows local users to overwrite arbitrary files via a symlink attack on several files in /tmp/, including ibdiagnet.db, ibdiagnet.fdbs, ibdiagnet ibis.log, ibdiagnet.log, ibdiagnet.lst, ibdiagnet.mcfdbs, ibdiagnet.pkey, ibdiagnet.psl, ibdiagnet.slvl, and ibdiagnet.sm.

Recommendations For OpenFabrics ibutils version 1.5.7, consider restricting access to the files in /tmp/ that are vulnerable to the symlink attack until a patch is available. As a temporary workaround, avoid using the vulnerable files in /tmp/ to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CESA-2013_1661

CVE-2013-2561

RHSA-2013:1661

RHSA-2013_1661

Affected Products

Centos

Red Hat

Ibutils

References · 69

• 🔥 http://seclists.org/fulldisclosure/2013/Mar/87 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2013-2561 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2013-2561 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2561 · Security Note
• http://rhn.redhat.com/errata/RHSA-2013-1661.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2013-1661.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4516 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-2561 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-2561 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-2561 · Security Note
• https://ubuntu.com/security/CVE-2013-2561 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-2561 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2013-2561 · Note
• https://lists.centos.org/pipermail/centos-cr-announce/2013-November/013854.html · Note
• https://rhn.redhat.com/errata/RHSA-2013-1661.html · Note