PT-2013-4904 · Intel · Intel Wimax Network Service

Published 2013-08-25 · Updated 2013-08-27 · CVE-2013-4216

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Intel WiMAX Network Service versions prior to 1.5.3

Description The issue concerns the Trace OpenLogFile function in the Trace module, which uses world-writable permissions for the wimaxd.log file. This allows local users to cause a denial of service by modifying the file, resulting in data corruption.

Recommendations For versions prior to 1.5.3, consider restricting write access to the wimaxd.log file to prevent local users from modifying it and causing data corruption. As a temporary workaround, restrict access to the Trace OpenLogFile function until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-4216

Affected Products

Intel Wimax Network Service

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-4216 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=911122 · Note
• http://openwall.com/lists/oss-security/2013/08/08/17 · Note