CVE-2008-3277: Path Traversal
First published: Tue Aug 05 2008(Updated: )
ibutils packages as shipped in Red Hat Enterprise Linux 4 and 5 are built to use insecure RPATH set in the ELF header of the ibmssh command. This issue can possibly be exploited by a local attacker to run arbitrary code as some other user if victim user can be convinced to run ibmssh command in an attacker controlled directory with specially crafted content. Affected binary: /usr/bin/ibmssh RPATH: refix/lib
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenFabrics ibutils | =1.5.7-2 | |
| Redhat Enterprise Linux | =6.0 | |
| OpenFabrics ibutils | =1.2-11.2 | |
| Redhat Enterprise Linux | =5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/author
- agent/severity
- agent/last-modified-date
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2008-3277
- agent/tags
- agent/event
- agent/trending
- vendor/openfabrics
- canonical/openfabrics ibutils
- version/openfabrics ibutils/1.5.7-2
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/6.0
- version/openfabrics ibutils/1.2-11.2
- version/redhat enterprise linux/5