Vulnerability CVE-2016-2984

Vulnerability CVE-2016-2984

Published: 2016-11-24 Modified: 2016-11-25

Description:

IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted command-line parameters to a /usr/lpp/mmfs/bin/ setuid program.

CVSS2 => (AV:L/AC:M/Au:N/C:C/I:C/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
6.9/10	10/10	3.4/10

Exploit range	Attack complexity	Authentication
Local	Medium	No required
Confidentiality impact	Integrity impact	Availability impact
Complete	Complete	Complete

Affected software
IBM -> General parallel file system
IBM -> Spectrum scale

References:

http://www-01.ibm.com/support/docview.wss?uid=ssg1S1007994

http://www.securityfocus.com/bid/92410

Copyright 2024, cxsecurity.com