PT-2014-3878 · Ibm · Gpfs

Florian Grunow · Published 2014-02-04 · Updated 2017-08-29 · CVE-2014-0834

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM General Parallel File System (GPFS) versions 3.4 through 3.4.0.27 IBM General Parallel File System (GPFS) versions 3.5 through 3.5.0.16

Description The issue allows attackers to cause a denial of service, resulting in a daemon crash, by providing crafted arguments to a setuid program.

Recommendations For IBM General Parallel File System (GPFS) versions 3.4 through 3.4.0.27, update to a version later than 3.4.0.27 to resolve the issue. For IBM General Parallel File System (GPFS) versions 3.5 through 3.5.0.16, update to a version later than 3.5.0.16 to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-0834

Affected Products

Gpfs

References · 7

• http://www-01.ibm.com/support/docview.wss?uid=isg3T1020542 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV54381 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV52863 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0834 · Security Note
• http://securityfocus.com/bid/65297 · Note
• http://osvdb.org/102765 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90647 · Note