CVE-2008-3277: Path Traversal
ibutils packages as shipped in Red Hat Enterprise Linux 4 and 5 are built to use insecure RPATH set in the ELF header of the ibmssh command.
This issue can possibly be exploited by a local attacker to run arbitrary code as some other user if victim user can be convinced to run ibmssh command in an attacker controlled directory with specially crafted content.
Affected binary: /usr/bin/ibmssh RPATH: refix/lib
Other sources
Untrusted search path vulnerability in a certain Red Hat build script for the ibmssh executable in ibutils packages before ibutils-1.5.7-2.el6 in Red Hat Enterprise Linux (RHEL) 6 and ibutils-1.2-11.2.el5 in Red Hat Enterprise Linux (RHEL) 5 allows local users to gain privileges via a Trojan Horse program in refix/lib/, related to an incorrect RPATH setting in the ELF header.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3277?
CVE-2008-3277 is considered a high severity vulnerability as it allows local attackers to execute arbitrary code.
How do I fix CVE-2008-3277?
To fix CVE-2008-3277, upgrade the ibutils package to a version that does not use the insecure RPATH setting.
Which systems are affected by CVE-2008-3277?
CVE-2008-3277 affects the ibutils packages in Red Hat Enterprise Linux 4 and 5.
Can CVE-2008-3277 be exploited remotely?
No, CVE-2008-3277 requires local access to exploit the vulnerability.
What is the potential impact of CVE-2008-3277?
The potential impact of CVE-2008-3277 is that an attacker could execute arbitrary code as another user on the system.