CVE-2008-3277: Path Traversal

Published Aug 5, 2008
·
Updated

ibutils packages as shipped in Red Hat Enterprise Linux 4 and 5 are built to use insecure RPATH set in the ELF header of the ibmssh command.

This issue can possibly be exploited by a local attacker to run arbitrary code as some other user if victim user can be convinced to run ibmssh command in an attacker controlled directory with specially crafted content.

Affected binary: /usr/bin/ibmssh RPATH: refix/lib

Other sources

Untrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable in ibutils packages before ibutils-1.5.7-2.el6 in Red Hat Enterprise Linux (RHEL) 6 and ibutils-1.2-11.2.el5 in Red Hat Enterprise Linux (RHEL) 5 allows local users to gain privileges via a Trojan Horse program in refix/lib/, related to an incorrect RPATH setting in the ELF header.

Affected Software

8 affected components
OpenFabrics ibutils=1.5.7-2
redhat Enterprise Linux=6.0
OpenFabrics ibutils=1.2-11.2
redhat Enterprise Linux=5
All of the following
OpenFabrics ibutils=1.5.7-2
redhat Enterprise Linux=6.0
All of the following
OpenFabrics ibutils=1.2-11.2
redhat Enterprise Linux=5

Event History

Aug 5, 2008
Data Sourced
via Red Hat·04:08 PM
DescriptionSeverityAffected Software
Apr 15, 2014
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
11:55 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·11:55 PM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2008-3277?

CVE-2008-3277 is considered a high severity vulnerability as it allows local attackers to execute arbitrary code.

2

How do I fix CVE-2008-3277?

To fix CVE-2008-3277, upgrade the ibutils package to a version that does not use the insecure RPATH setting.

3

Which systems are affected by CVE-2008-3277?

CVE-2008-3277 affects the ibutils packages in Red Hat Enterprise Linux 4 and 5.

4

Can CVE-2008-3277 be exploited remotely?

No, CVE-2008-3277 requires local access to exploit the vulnerability.

5

What is the potential impact of CVE-2008-3277?

The potential impact of CVE-2008-3277 is that an attacker could execute arbitrary code as another user on the system.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203