Vulnerability CVE-2016-2985

Vulnerability CVE-2016-2985

Published: 2016-11-24 Modified: 2016-11-25

Description:

IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted environment variables to a /usr/lpp/mmfs/bin/ setuid program.

CVSS2 => (AV:L/AC:M/Au:N/C:C/I:C/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
6.9/10	10/10	3.4/10

Exploit range	Attack complexity	Authentication
Local	Medium	No required
Confidentiality impact	Integrity impact	Availability impact
Complete	Complete	Complete

Affected software
IBM -> General parallel file system
IBM -> Spectrum scale

References:

http://www-01.ibm.com/support/docview.wss?uid=ssg1S1007994

http://www.securityfocus.com/bid/92408

Copyright 2024, cxsecurity.com