Headline

CVE-2011-4339: security - OpenIPMI: IPMI event daemon creates PID file with world writeable permissions

ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this file.

12 years ago

CVE

Open in Source

#web #mac #windows #linux #debian #red_hat #git

Products
- Openwall GNU/*/Linux server OS
- Linux Kernel Runtime Guard
- John the Ripper password cracker
  - Free & Open Source for any platform
  - in the cloud
  - Pro for Linux
  - Pro for macOS
- Wordlists for password cracking
- passwdqc policy enforcement
  - Free & Open Source for Unix
  - Pro for Windows (Active Directory)
- yescrypt KDF & password hashing
- yespower Proof-of-Work (PoW)
- crypt_blowfish password hashing
- phpass ditto in PHP
- tcb better password shadowing
- Pluggable Authentication Modules
- scanlogd port scan detector
- popa3d tiny POP3 daemon
- blists web interface to mailing lists
- msulogin single user mode login
- php_mt_seed mt_rand() cracker
Services
Publications
- Articles
- Presentations
Resources
- Mailing lists
- Community wiki
- Source code repositories (GitHub)
- Source code repositories (CVSweb)
- File archive & mirrors
- How to verify digital signatures
- OVE IDs
What’s new

[<prev] [next>] [day] [month] [year] [list]

Date: Tue, 13 Dec 2011 09:24:44 +0530 From: Huzaifa Sidhpurwala <huzaifas@…hat.com> To: oss-security@…ts.openwall.com Subject: OpenIPMI: IPMI event daemon creates PID file with world writeable permissions

Hi,

A insecure file permissions flaw was found in the way IPMI event daemon of the OpenIPMI (Intelligent Platform Management Interface) library and tools created its PID file (it was created with 0666 permissions). A local user could use this flaw to kill arbitrary running process during ipmievd service shutdown.

This has been assigned CVE-2011-4339

Reference: https://bugzilla.redhat.com/show_bug.cgi?id=742837

– Huzaifa Sidhpurwala / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.